The vulnerability of Linux operating system’s DRM/AMDGPU cores allows a hacker to trigger a service failure.

The vulnerability of DRM/AMDGPU cores in the Linux operating system is related to errors in reading data beyond the buffer boundaries of memory. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the ALSA kernel component in Linux operating systems, which allows a hacker to cause a service failure

The vulnerability of the ALSA kernel component in Linux operating systems arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the ocfs2 component in the Linux operating system allows a hacker to gain elevated privileges within the system.

The vulnerability of the ocfs2 component in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...

The vulnerability of the aio kernel component in the Linux operating system allows attackers to increase their privileges within the system.

The vulnerability of the aio kernel component in the Linux operating system is related to memory management errors after deallocation. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...

The vulnerability of the pm80xx kernel component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the pm80xx kernel component in the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

unzip-bot 操作系统命令注入漏洞

unzip-bot is a Telegram bot used by EDM115 to extract various types of archives. An operating system command injection vulnerability exists in versions prior to unzip-bot 7.0.3a, which stems from improper input cleanup and allows a user to inject malicious commands via constructed zip file names,...

The vulnerability of the Application Layer Gateway module in Juniper Networks’ Junos OS network devices of the SRX and MX series allows a attacker to cause service interruptions.

The vulnerability of the Application Layer Gateway module in Juniper Networks’ Junos OS network devices of the SRX and MX series involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

PT-2025-23571

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description Memory corruption may occur while attaching a virtual machine VM when the Host Operating System HLOS retains access to the VM. Recommendations At the moment, there is no information about a...

The vulnerability of the liteuart component in the Linux operating system allows a hacker to gain access to confidential information.

The vulnerability of the liteuart component in the Linux operating system is related to the disclosure of information through the liteuartprobe function. Exploiting this vulnerability can allow an attacker to gain access to confidential information...

The vulnerability of the IPSEC component of the Brocade Fabric OS allows attackers to enhance their privileges.

The vulnerability of the IPSEC component in the Brocade Fabric OS operating system is related to the lack of measures taken at the management level to clean data. Exploiting this vulnerability can allow attackers to enhance their privileges by executing a specially created portcfg command...

Vulnerability of RDMA/IRDMA components of the Linux operating system, allowing a hacker to cause a service failure

The vulnerability of RDMA/IRDMA components in the Linux operating system is related to the assignment of the NULL pointer in the irdmaaddmqh4 function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the clk-mt6779 component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the clk-mt6779 component in the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-53980 Spoofed length byte traps CC2538 in endless loop

RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things IoT devices and other embedded devices. A malicious actor can send a IEEE 802.15.4 packet with spoofed length byte and optionally spoofed FCS, which eventually results into an endless...

GHSA-Q59J-VV4J-V33C vulnerabilities

Vulnerabilities for packages: promxy, pulumi, amazon-cloudwatch-agent-operator...

The vulnerability of the Intel Server Debug and Provisioning Tool (Intel SDP) in managing and operating server infrastructure affects Windows operating systems. This vulnerability stems from insufficient access control mechanisms, allowing attackers to increase their privileges.

The vulnerability of the Intel Server Debug and Provisioning Tool Intel SDP for operating systems running on Windows relates to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges...

CVE-2024-41125 Out-of-bounds read in SNMP when decoding a string in Contiki-NG

Contiki-NG is an open-source, cross-platform operating system for IoT devices. An out-of-bounds read of 1 byte can be triggered when sending a packet to a device running the Contiki-NG operating system with SNMP enabled. The SNMP module is disabled in the default Contiki-NG configuration. The...

CVE-2024-41125 Out-of-bounds read in SNMP when decoding a string in Contiki-NG

Contiki-NG is an open-source, cross-platform operating system for IoT devices. An out-of-bounds read of 1 byte can be triggered when sending a packet to a device running the Contiki-NG operating system with SNMP enabled. The SNMP module is disabled in the default Contiki-NG configuration. The...

CVE-2024-41126 Out-of-bounds read when decoding SNMP messages in Contiki-NG

Contiki-NG is an open-source, cross-platform operating system for IoT devices. An out-of-bounds read of 1 byte can be triggered when sending a packet to a device running the Contiki-NG operating system with SNMP enabled. The SNMP module is disabled in the default Contiki-NG configuration. The...

The vulnerability of the qd_check_sync() function in the imon component of Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the qdchecksync function in the imon component of Linux operating systems is related to an uncontrolled, exploitable condition. Exploiting this vulnerability could allow a attacker to cause a service failure...

EnGenius EWS356-FIT 安全漏洞

The EnGenius EWS356-FIT is an indoor wireless access point from EnGenius. A security vulnerability exists in the EnGenius EWS356-FIT version 1.1.30 and prior versions. A remote attacker could exploit the vulnerability to execute arbitrary operating system commands via the controller connection...