The vulnerability of the ext4_truncate() function in the fs/ext4/inode.c module of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext4truncate function in the fs/ext4/inode.c file of the Ext4 file system in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the optc1_enable_optc_clock() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the optc1enableoptcclock function in the Linux operating system is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the sanity_check_curseg() function in the Linux operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sanitycheckcurseg function in the Linux operating system’s kernel is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the `ntfs_read inode_mount()` function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ntfsread inodemount function in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2026-25566 WeKan < 8.19 Cross-board Card Move Without Destination Authorization

WeKan versions prior to 8.19 contain an authorization vulnerability in card move logic. A user can specify a destination board/list/swimlane without adequate authorization checks for the destination and without validating that destination objects belong to the destination board, potentially...

Malicious code in ac-polyfills (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a7d9d049932519bded5d12b8627523ef63dac69179b1ce873cf4cd8b7fe6849 The package ac-polyfills was found to contain malicious code...

The vulnerability of the ieee80211_register_hw() function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ieee80211registerhw function in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...

The vulnerability of the ipcomp_free_scratches() function in the net/xfrm/xfrm_ipcomp.c module, a component of the Linux kernel’s networking functions, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ipcompfreescratches function in the net/xfrm/xfrmipcomp.c module, which is part of the Linux kernel’s networking functions, relates to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow an attacker to compromise...

The vulnerability of the bcsp_recv() function in the drivers/bluetooth/hci_bcsp.c module of the Linux Bluetooth device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bcsprecv function in the drivers/bluetooth/hcibcsp.c module of the Linux Bluetooth device driver framework is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the `udp_tunnel_nic_netdevice_event()` function in the `net/ipv4/udp_tunnel_nic.c` module of the Linux operating system’s IPv4 protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the udptunnelnicnetdeviceevent function in the net/ipv4/udptunnelnic.c module of the Linux kernel’s IPv4 protocol implementation is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the bfs_iget() function in the fs/bfs/inode.c file of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bfsiget function in the fs/bfs/inode.c file of the Linux kernel file system is related to incorrect initialization of resources. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the ntfs_read_mft() function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ntfsreadmft function in the Linux operating system is related to improper initialization of resources. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the stmmac_rx() function in the Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the stmmacrx function in the Linux operating system’s kernel is related to buffer overflow based on a stack. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the nfs4_setup_readdir() function in the fs/nfs/nfs4proc.c module, which is part of the NFS client support in Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the nfs4setupreaddir function in the fs/nfs/nfs4proc.c module, which is part of the NFS client support in Linux kernel, relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...

The vulnerability of the `sco_sock_kill()` function in the `net/bluetooth/sco.c` module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the scosockkill function in the net/bluetooth/sco.c module of the Linux Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the stripe_io_hints() function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the stripeiohints function in the Linux operating system is related to integer overflow or cyclic shift attacks. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the devlink_notify_unregister() function in the net/devlink/leftover.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the devlinknotifyunregister function in the net/devlink/leftover.c module, which is part of the Linux kernel’s networking functions, is related to the improper generation of crash reports. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

The vulnerability of the sddr55_write_data() function in the drivers/usb/storage/sddr55.c module of the Linux operating system’s USB device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sddr55writedata function in the drivers/usb/storage/sddr55.c module of the Linux operating system’s device driver framework is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the brcmf_fw_alloc_request() function in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/firmware.c file of the Broadcom wireless adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the brcmffwallocrequest function in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/firmware.c file of the Broadcom wireless adapter driver in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an...

Cleartext Storage of Sensitive Information

Overview fuxa-server is a Web-based Process Visualization SCADA/HMI/Dashboard software Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information via runtime.settings. An attacker can obtain sensitive administrative database credentials and full system...