30477 matches found
The vulnerability of the intel_quark_thermal_init() function in the drivers/thermal/intel/intel_quark_dts_thermal.c file of the Linux kernel temperature management driver allows a hacker to cause a system failure.
The vulnerability of the intelquarkthermalinit function in the drivers/thermal/intel/intelquarkdtsthermal.c file of the Linux kernel temperature management driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the vduse_vdpa_set_vq_affinity() function in the drivers/vdpa/vdpa_user/vduse_dev.c driver for vDPA devices in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the vdusevdpasetvqaffinity function in the drivers/vdpa/vdpauser/vdusedev.c driver for vDPA devices in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the do_ovl_get_acl() function in the fs/overlayfs/inode.c file of the Overlayfs file system in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the doovlgetacl function in the fs/overlayfs/inode.c file of the Overlayfs file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the device_add() function in the drivers/base/core.c driver for Linux kernel-based device drivers allows a attacker to cause a service failure.
The vulnerability of the deviceadd function in the drivers/base/core.c driver for Linux kernel-based peripheral devices is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the qedfalloc_global_queues() function in the drivers/scsi/qedf/qedf_main.c file of the Linux operating system’s SCSI device driver allows a hacker to cause a service failure.
The vulnerability of the qedfallocglobalqueues function in the drivers/scsi/qedf/qedfmain.c file of the Linux operating system’s SCSI device driver kernel module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the PKCS12_item_decrypt_d2i_ex() function in the OpenSSL library allows a hacker to trigger a denial-of-service attack.
The vulnerability of the PKCS12itemdecryptd2iex function in the OpenSSL library is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the intel_gvtdebugfs_init() function in the drivers/gpu/drm/i915/gvt/debugfs.c file of the Direct Rendering Infrastructure (DRI) driver in the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the intelgvtdebugfsinit function in the drivers/gpu/drm/i915/gvt/debugfs.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the skb_segment_list() function in the net/core/skbuff.c module, which is part of Linux’s kernel network functions, allows a hacker to cause a service failure.
The vulnerability of the skbsegmentlist function in the net/core/skbuff.c module, which is part of Linux’s kernel network functions support, relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux Distros Unpatched Vulnerability : CVE-2025-67849
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Moodle. This cross-site scripting XSS vulnerability, caused by improper sanitization of AI prompt responses, allows attackers to inject...
CVE-2020-37094
EspoCRM 5.7.0 prior to 5.9.0 contains an authentication token reuse vulnerability that allows authenticated attackers to bypass two-factor authentication by exploiting token-to-password-hash mapping in application/Espo/Core/Utils/Authentication/Espo.php. Attackers can obtain an authentication tok...
CVE-2020-37086
Easy Transfer 1.7 iOS mobile application contains a directory traversal vulnerability that allows remote attackers to access unauthorized file system paths without authentication. Attackers can exploit the vulnerability by manipulating path parameters in GET and POST requests to list or download...
CVE-2020-37094 EspoCRM 5.7.0 < 5.9.0 - Two-Factor Authentication Bypass via Auth Token Reuse Between Accounts with Identical Passwords
EspoCRM 5.7.0 prior to 5.9.0 contains an authentication token reuse vulnerability that allows authenticated attackers to bypass two-factor authentication by exploiting token-to-password-hash mapping in application/Espo/Core/Utils/Authentication/Espo.php. Attackers can obtain an authentication tok...
CVE-2020-37089 School ERP Pro 1.0 - 'es_messagesid' SQL Injection
School ERP Pro 1.0 contains a SQL injection vulnerability in the 'esmessagesid' parameter that allows attackers to manipulate database queries through GET requests. Attackers can exploit the vulnerable parameter by injecting crafted SQL statements to potentially extract, modify, or delete databas...
CVE-2020-37086
Easy Transfer 1.7 iOS mobile application contains a directory traversal vulnerability that allows remote attackers to access unauthorized file system paths without authentication. Attackers can exploit the vulnerability by manipulating path parameters in GET and POST requests to list or download...
CVE-2025-10878
A SQL injection vulnerability exists in the login functionality of Fikir Odalari AdminPando 1.0.1 before 2026-01-26. The username and password parameters are vulnerable to SQL injection, allowing unauthenticated attackers to bypass authentication completely. Successful exploitation grants full...
CVE-2025-10878
A SQL injection vulnerability exists in the login functionality of Fikir Odalari AdminPando 1.0.1 before 2026-01-26. The username and password parameters are vulnerable to SQL injection, allowing unauthenticated attackers to bypass authentication completely. Successful exploitation grants full...
CVE-2026-25239
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability in apidoc queue insertion can allow query manipulation if an attacker can influence the inserted filename value. This issue has been patched in version 1.33.0...
CVE-2020-37110
60CycleCMS 2.5.2 contains an SQL injection vulnerability in news.php and common/lib.php that allows attackers to manipulate database queries through unvalidated user input. Attackers can exploit vulnerable query parameters like 'title' to inject malicious SQL code and potentially extract or modif...
CVE-2024-4147
In lunary-ai/lunary version 1.2.13, an insufficient granularity of access control vulnerability allows users to delete prompts created in other organizations through ID manipulation. The vulnerability stems from the application's failure to validate the ownership of the prompt before deletion, on...
