826 matches found
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A stack overflow vulnerability exists in the Huawei HarmonyOS media platform, which can be exploited by an attacker to cause availability to be compromised...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An access control vulnerability exists in the Huawei HarmonyOS memoization module, which can be exploited by an attacker to cause confidentiality and...
The vulnerability of the `ib_del_sub_device_and_put()` function in the `drivers/infiniband/core/device.c` file of the Linux operating system’s InfiniBand driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ibdelsubdeviceandput function in the drivers/infiniband/core/device.c file of the Linux operating system’s InfiniBand driver is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the sco_recv_frame() function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the scorecvframe function in the Linux operating system is related to a violation of the count of links to pages displayed in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...
ROS-20260403-73-0003
A vulnerability in the ksmbdsessionrpcopen function in the fs/smb/server/mgmt/usersession.c module of the Linux kernel SMB server support is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availabili...
EUVD-2026-18176
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the setinfo endpoint due to improper neutralization of special elements in a SQL UPDATE command. This can result in a total loss of integrity and availability...
CVE-2026-33615 MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the setinfo Endpoint
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the setinfo endpoint due to improper neutralization of special elements in a SQL UPDATE command. This can result in a total loss of integrity and availability...
The vulnerability of the macb_get_addr() function in the drivers/net/ethernet/cadence/macb_main.c file of the Ethernet network adapter driver from Cadence’s Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the macbgetaddr function in the drivers/net/ethernet/cadence/macbmain.c file of the Ethernet network adapter driver from Cadence’s Linux kernel lies in the occurrence of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a...
CVE-2026-28449
OpenClaw versions prior to 2026.2.25 lack durable replay state for Nextcloud Talk webhook events, allowing valid signed webhook requests to be replayed without suppression. Attackers can capture and replay previously valid signed webhook requests to trigger duplicate inbound message processing an...
The vulnerability of the otx2_set_ringparam() function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2_ethtool.c file of the Ethernet network adapter driver for the Marvell-based Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the otx2setringparam function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2ethtool.c file of the Ethernet network adapter driver for the Marvell-based Linux operating system is related to buffer-overflow attacks. Exploiting this vulnerability could allow an attacker ...
ROS-20260319-73-0012
A vulnerability in the tagkey validation mechanism of the Fluent Bit log collection and processing tool is related to insufficient input data validation. Exploitation of the vulnerability could allow an attacker acting remotely to affect the integrity and availability of protected information...
ROS-20260317-73-0025
A vulnerability in the cryptmessage function in the fs/smb/client/smb2ops.c module of the SMB client support module of the Linux kernel is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability...
The vulnerability of the dmar_parse_one_rhsa() function in the drivers/iommu/intel/dmar.c file of the Linux operating system’s IOMMU driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the dmarparseonerhsa function in the drivers/iommu/intel/dmar.c file of the Linux operating system’s IOMMU driver is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of the igb_io_error_detected() function in the drivers/net/ethernet/intel/igb/igb_main.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the igbioerrordetected function in the drivers/net/ethernet/intel/igb/igbmain.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker...
CVE-2023-31324
A Time-of-check time-of-use TOCTOU race condition in the AMD Secure Processor ASP could allow an attacker to modify External Global Memory Interconnect Trusted Agent XGMI TA commands as they are processed potentially resulting in loss of confidentiality, integrity, or availability...
CVE-2023-31324
A Time-of-check time-of-use TOCTOU race condition in the AMD Secure Processor ASP could allow an attacker to modify External Global Memory Interconnect Trusted Agent XGMI TA commands as they are processed potentially resulting in loss of confidentiality, integrity, or availability...
CVE-2024-36320
Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to loss of confidentiality, integrity and availability...
CVE-2024-36311
A Time-of-check time-of-use TOCTOU race condition in the SMM communications buffer could allow a privileged attacker to bypass input validation and perform an out of bounds read or write, potentially resulting in loss of confidentiality, integrity, or availability...
CVE-2024-36311
CVE-2024-36311 describes a TOCTOU race in the SMM communications buffer that could allow a privileged attacker to bypass input validation and perform an out-of-bounds read or write, potentially impacting confidentiality, integrity, and availability. The Red Hat, NVD, CVE lists and vendor advisori...