5103 matches found
The vulnerability of the bpf_prog_map_compatible() function in the kernel/bpf/core.c file of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the bpfprogmapcompatible function in the kernel/bpf/core.c file of the Linux operating system is related to errors in the code. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
KLA82680 Multiple vulnerabilities in Oracle VirtualBox
Denial of service vulnerabilities were found in Oracle VirtualBox. Malicious users can exploit these vulnerability to cause denial of service. Original advisories Oracle Virtualization Risk Matrix Exploitation Public exploits exist for this vulnerability. Related products Oracle-VirtualBox CVE li...
The vulnerability of the kvm_tdp_mmu_put_root() function in the arch/x86/kvm/mmu/tdp_mmu.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the kvmtdpmmuputroot function in the arch/x86/kvm/mmu/tdpmmu.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromis...
CVE-2024-58110
Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-58106
Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability...
KLA82886 DoS vulnerability in Apache Tomcat
Out of bounds memory read vulnerability was found in Apache Tomcat. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Denial of Service via invalid HTTP priority header Related products Apache-Tomcat CVE list CVE-2025-31650 critical Solution Update to...
CVE-2024-58115
Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-58113
Vulnerability of improper resource management in the memory management module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-58106
Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-58107
Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-58106
Technical details for CVE-2024-58106 are not publicly provided in the connected documents; no explicit affected versions, root cause, or fixes are available here. Monitor for updates from Huawei and security advisories.
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a security issue that can be exploited by attackers to affect availability...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a resource mismanagement vulnerability that can be exploited by attackers to affect availability...
CVE-2024-36328
Integer overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to loss of integrity or availability...
AMD NPU driver 输入验证错误漏洞
AMD NPU driver is a driver for an NPU module from UltraMicroelectronics AMD. A security vulnerability exists in AMD NPU driver that stems from an integer overflow that could lead to an out-of-bounds write by a local attacker, affecting integrity and availability...
CVE-2025-28131
A Broken Access Control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows low-privilege users with "Read-Only" access to perform administrative actions, including stopping system services and deleting critical resources. This flaw arises due to improper authorization enforcement, enablin...
python-tornado: Tornado has HTTP cookie parsing DoS vulnerability
A flaw was found in Tornado's HTTP cookie parsing algorithm. This vulnerability allows excessive CPU consumption via maliciously crafted cookie headers due to Quadratic complexity, potentially blocking the processing of other requests and leading to the loss of availability of the system...
The vulnerability of the do_active_device() function in the drivers/parport/procfs.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the doactivedevice function in the drivers/parport/procfs.c module of the Linux kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
CVE-2025-26500 VxWorks 7 USB Failure
: Uncontrolled Resource Consumption vulnerability in Wind River Systems VxWorks 7 on VxWorks allows Excessive Allocation. Specifically crafted USB packets may lead to the system becoming unavailable This issue affects VxWorks 7: from 22.06 through 24.03...
The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software lies in the lack of measures taken to neutralize specific elements, allowing attackers to influence the integrity, confidentiality, and accessibility of protected information.
The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow a remote attacker to compromise the integrity, confidentiality, and accessibility of the...