130 matches found
CVE-2022-21746
In imgsensor, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06479698; Issue ID: ALPS06479698...
CVE-2022-30052
In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks...
PT-2025-11631
Name of the Vulnerable Software and Affected Versions 389-ds-base LDAP Server affected versions not specified Description A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return value is not...
USN-7332-2: Linux kernel vulnerabilities
Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...
Linux Distros Unpatched Vulnerability : CVE-2024-0639
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial of service vulnerability due to a deadlock was found in sctpautoasconfinit in net/sctp/socket.c in the Linux kernel's SCTP subsystem. This flaw allows...
CVE-2025-0750 Cri-o: cri-o path traversal in log handling functions allows arbitrary unmounting
A vulnerability was found in CRI-O. A path traversal issue in the log management functions UnMountPodLogs and LinkContainerLogs may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system...
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
...
Oqiwei Information Technology (Beijing) Co., Ltd. bakuro nebula - digital food service system has SQL injection vulnerability
Oqiwei Information Technology Beijing Co., Ltd. is committed to be a continuous leader of digital solutions in the cloud era. Aoqiwei Information Technology Beijing Co., Ltd. BAKU Nebula - Digital Food Service System has a SQL injection vulnerability, which can be exploited by attackers to obtain...
Ubuntu: Security Advisory (USN-7003-5)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2024-18552 · Modem · Modem
Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to improper input validation, which can cause a system crash. This can lead to a remote denial of service, and no additional execution privileges are needed for...
SQL Injection Vulnerability in Campus Network Self-service System of Beijing StarNet Ruijie Network Technology Co. Ltd (CNVD-2024-28356)
Beijing StarNet Ruijie Network Technology Co., Ltd. is a leading ICT infrastructure and industry solutions provider. A SQL injection vulnerability exists in the campus network self-service system of Beijing StarNet Ruijie Network Technology Co., Ltd, which can be exploited by attackers to obtain...
CVE-2024-3948
CVE-2024-3948 affects SourceCodester Home Clean Service System 1.0. The issue is described as a vulnerability in the Photo Handler component, specifically a flaw in the file cornered to the admin\student.add.php (noted as admin\student.add.php in the public description) that enables unrestricted ...
CVE-2024-3948: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in SourceCodester Home Clean Service System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file \admin\student.add.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack may be launch...
USN-6706-1: Linux kernel (OEM) vulnerability
It was discovered that the Microchip USB Ethernet driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could use this to cause a denial of service system crash...
PT-2024-13598 · Unknown · Vsp Driver
Name of the Vulnerable Software and Affected Versions: vsp driver affected versions not specified Description: The issue is related to a logic error in the vsp driver, which can cause a use after free condition. This could lead to a local denial of service and requires System execution privileges...
CVE-2023-32887
In Modem IMS Stack, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161837; Issue ID: MOLY01161837 MSV-892...
CVE-2023-42726
In TeleService, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...
CVE-2023-20759
In cmdq, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07636133; Issue ID: ALPS07634601...
Out-of-bounds
In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...