Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the return value of a BPF structure operation not being correctly symbolically expanded, which could cause t...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an uninitialized uinputffuploadcompat structure, which could lead to information disclosure...

The vulnerability of the Clincapture EDC data collection platform, related to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.

The vulnerability of the Clincapture EDC data collection platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to perform XSS attacks...

The vulnerability of the Joomla! content management system lies in the lack of measures taken to protect the SQL query structure, allowing attackers to execute malicious code remotely.

The vulnerability of the Joomla! website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute remote code...

Linux Distros Unpatched Vulnerability : CVE-2025-40024

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vhost: Take a reference on the task in struct vhosttask. vhosttaskcreate creates a task and keeps a reference to its taskstruct. That task may exit early via a...

Siemens SIMATIC Devices Use of Uninitialized Resource (CVE-2024-35893)

In the Linux kernel, the following vulnerability has been resolved: net/sched: actskbmod: prevent kernel-infoleak syzbot found that tcfskbmoddump was copying four bytes from kernel stack to user space. The issue here is that 'struct tcskbmod' has a four bytes hole. We need to clear the structure...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the improper use of boolean values in the afalgctx structure, which could lead to data conversion errors...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not obtaining a task reference in struct vhosttask, which could lead to accessing a freed task structure...

DEBIAN-CVE-2023-53715

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex Apparently the hex passphrase mechanism does not work on newer chips/firmware e.g. BCM4387. It seems there was a simple way of passing it in binary all along, so use...

UBUNTU-CVE-2023-53715

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex Apparently the hex passphrase mechanism does not work on newer chips/firmware e.g. BCM4387. It seems there was a simple way of passing it in binary all along, so use...

CVE-2023-53715

CVE-2023-53715: In the Linux kernel wifi/brcmfmac cfg80211 path, the passphrase PMK is now passed in binary instead of hex to accommodate newer chips/firmware (e.g., BCM4387). The fix also clears the structure before setting the PMK to prevent leaking uninitialized stack contents to the device. O...

The vulnerability of the PHP library PhpSpreadsheet, related to the lack of protection for website structure, allows attackers to execute arbitrary JavaScript code.

The vulnerability of the PHP library PhpSpreadsheet is related to the lack of protective measures for website structures. Exploiting this vulnerability allows a perpetrator to execute arbitrary JavaScript code remotely...

The vulnerability of the server-based geospatial information system, MapServer, related to the lack of measures taken to protect the SQL query structure, allows attackers to execute arbitrary code.

The vulnerability of the server-based geospatial information system, MapServer, is related to the lack of measures taken to protect the SQL query structure during the processing of the PropertyName parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotel...

EUVD-2022-54716

In the Linux kernel, the following vulnerability has been resolved: cpufreq: governor: Use kobject release method to free dbsdata The struct dbsdata embeds a struct govattrset and the struct govattrset embeds a kobject. Since every kobject must have a release method and we can't use kfree to free...

The vulnerability of D-Link Nuclias Connect software for centralized control of wireless networks arises from the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of D-Link Nuclias Connect wireless network management software is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the XWiki Rendering system, related to the lack of measures taken to protect the structure of web pages, allows attackers to perform cross-site scripting attacks.

The vulnerability of the XWiki Rendering system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, relates to the lack of measures taken to protect the SQL query structure, allowing attackers to gain access to protected information.

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the protected information...

The vulnerability of the WordPress website content management system, related to the lack of measures taken to protect the website’s structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the WordPress website content management system is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Perl Data Structure Transformation Module in JSON Cpanel::JSON::XS, related to integer overflow, allows an attacker to execute arbitrary code.

The vulnerability of the Perl JSON data structure transformation module in Cpanel::JSON::XS is related to integer overflow during JSON data parsing. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, relates to the lack of measures taken to protect the SQL query structure, allowing attackers to gain access to protected information.

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the protected information...