3713 matches found
The vulnerability of the cleanup_net() function in the include/net/net_namespace.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the cleanupnet function in the include/net/netnamespace.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...
The vulnerability of the dstdestroy() function in the net/core/dst.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the dstdestroy function in the net/core/dst.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the E-Staff automated recruitment process system, related to data filtering errors, allows a perpetrator to compromise the integrity and accessibility of the protected information.
The vulnerability of the E-Staff recruitment automation system is related to errors in data filtering. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the integrity and accessibility of the protected information...
The vulnerability of the mgmt_set_powered_complete() function in the net/bluetooth/mgmt.c module of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the mgmtsetpoweredcomplete function in the net/bluetooth/mgmt.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...
The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to data type conversion errors, allows attackers to influence the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the pci_slot_release() function in the drivers/pci/slot.c module of the Linux kernel allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the pcislotrelease function in the drivers/pci/slot.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the tls_user_config() function in the include/net/tls.h module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the tlsuserconfig function in the include/net/tls.h module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
Vulnerability of the tcmu_try_get_block_page() function in the drivers/target/target_core_user.c module – The TCM driver for the Linux operating system’s kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerability of the tcmutrygetblockpage function in the drivers/target/targetcoreuser.c module – The TCM driver for the Linux operating system is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...
The vulnerability of the EFI loader in microprogrammed software for SIMATIC IPC devices, SIMATIC PC tablets, and SIMATIC Field PG notebooks allows a perpetrator to influence the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the EFI loader in microprogrammed software for SIMATIC IPC devices, SIMATIC PC tablets, and SIMATIC Field PG notebooks is related to the breach of data protection mechanisms. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and...
Vulnerability of the pps_gpio_probe() function in the drivers/pps/clients/pps-gpio.c module – This driver for Linux kernel’s PPS client support allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerability of the pps gpioprobe function in the drivers/pps/clients/pps-gpio.c module – The Linux kernel’s PPS client driver has a vulnerability related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the SAP NetWeaver software integration platform, related to the lack of authentication, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the SAP NetWeaver software integration platform is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to remotely compromise the confidentiality, integrity, and accessibility of the protected information...
Vulnerability of the fsl_mc_bus_remove() function in the drivers/bus/fsl-mc/fsl-mc-bus.c module – The fsl-mc bus driver in the Linux operating system’s kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerability of the fslmcbusremove function in the drivers/bus/fsl-mc/fsl-mc-bus.c module – The fsl-mc bus driver in Linux kernel is vulnerable due to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...
The vulnerability of the __mptcp_close_ssk() function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the mptcpclosessk function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability in browser extensions for Safari on operating systems macOS, iOS, iPadOS, and visionOS allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Safari browser extensions on macOS, iOS, iPadOS, and VisionOS operating systems is related to improper storage of permissions. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...
CVE-2025-32650
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ability, Inc Accessibility Suite online-accessibility allows SQL Injection.This issue affects Accessibility Suite: from n/a through = 4.18...
CVE-2025-32215
Unrestricted Upload of File with Dangerous Type vulnerability in Ability, Inc Accessibility Suite online-accessibility allows Stored XSS.This issue affects Accessibility Suite: from n/a through = 4.18...
CVE-2025-32640
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Elementor Ally pojo-accessibility allows Stored XSS.This issue affects Ally: from n/a through = 3.1.0...
CVE-2025-32650
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ability, Inc Accessibility Suite online-accessibility allows SQL Injection.This issue affects Accessibility Suite: from n/a through = 4.18...
CVE-2025-32650 WordPress Accessibility Suite by Ability, Inc plugin <= 4.18 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ability, Inc Accessibility Suite online-accessibility allows SQL Injection.This issue affects Accessibility Suite: from n/a through = 4.18...
CVE-2025-32650 WordPress Accessibility Suite by Ability, Inc plugin <= 4.18 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ability, Inc Accessibility Suite by Online ADA allows SQL Injection. This issue affects Accessibility Suite by Online ADA: from n/a through 4.18...