The vulnerability of software for asset management and GLPI data processing centers, related to improper access control, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of software for asset management and GLPI data processing centers relates to the implementation of a CSV file, by creating a file with a fake header. Exploiting this vulnerability can allow an attacker operating remotely to compromise the confidentiality, integrity, and...

The vulnerability of the zynqmp_dpsub_probe() function in the ZynQMP driver for Linux operating systems allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the zynqmpdpsubprobe function in the drivers/gpu/drm/xlnx/zynqmpdpsub.c file of the ZynMP driver for the Linux operating system is related to incorrect resource locking. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the _imagingcms.c file in the Python Pillow image library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the imagingcms.c file in the Pillow image processing library is due to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the f2fs_read_multi_pages() function in the f2fs file system of Linux kernels allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the f2fsreadmultipages function in the fs/f2fs/data.c file of the Linux kernel’s file system f2fs is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

The vulnerability of the NTFS3 file system driver in Linux operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information, or enhance their own privileges.

The vulnerability of the NTFS3 file system driver in Linux operating systems is related to the reallocation of previously released memory due to competitive access to resources during operations like remount and unmount. Exploiting this vulnerability allows an attacker to compromise the...

The vulnerability of the frmL7PlotForm function in the microprogramming software for Tenda W30E allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromDhcpListClient function in the Tenda W30E router software relates to the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected informatio...

The vulnerability of the blkpg_do_ioctl() function in the block/ioctl.c driver for block devices in the Linux operating system allows a attacker to compromise the integrity and accessibility of the protected information.

The vulnerability of the blkpgdoioctl function in the block/ioctl.c driver for block devices in the Linux operating system is related to the lack of correspondence between the sizes of partitions and the sizes of blocks. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the fromRouteStatic function in the microprogramming software for Tenda F1202, FH1202, AC7, and PW201A routers allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromRouteStatic function in the microprogramming software for Tenda F1202, FH1202, AC7, and PW201A routers is related to buffer overflows in the stack when processing the page parameter. Exploiting this vulnerability can allow an attacker to compromise the confidentiality...

The vulnerability of SAP Asset Accounting software for asset management and accounting involves incorrect restrictions on path names in the catalog, allowing attackers to manipulate the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the SAP Asset Accounting software for asset management and accounting is related to incorrect restrictions on the path to the catalog. Exploitation of this vulnerability can allow a malicious actor to influence the confidentiality, integrity, and accessibility of protected...

The vulnerability of the /libheif/exif.cc decoder and encoder for libheif files allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the /libheif/exif.cc decoder and file format encoder in the libheif library is related to a segmentation error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the decode_uncompressed_image() function, a decoder and file format encoder for the libheif library, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the decodeuncompressedimage function, a decoder and file format encoder for the libheif library, is related to a segmentation error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the programmatic tools and libraries used for working with OpenSC smart cards stems from improper restrictions on operations within memory buffers. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the programmatic tools and libraries used to work with OpenSC smart cards is related to memory errors during card registration using the pkcs15-init function. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility o...

CVE-2024-3138

The CVE-2024-3138 entry concerns francoisjacquet RosarioSIS 11.5.1, where a Cross-Site Scripting (XSS) vulnerability is attributed to an unknown processing in the Add Portal Note component. Reported impact is remote exploitation with user interaction required, leading to I(low) and A(none) for co...

The vulnerability of the fromDhcpListClient() function (/goform/DhcpListClient) in the Tenda AC15 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromDhcpListClient function /goform/DhcpListClient in the Tenda AC15 router’s software is related to the operation of writing data beyond the buffer in memory when processing the page parameter. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the sock_orphan() function in Linux operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the sockorphan function in Linux operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the __skb_flow_dissect() function in the networking component of the Linux operating system allows a attacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the skbflowdissect function in the net/core/flowdissector.c file of the Linux kernel’s network component is related to incorrect calculation of the network header offset. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality and...

The vulnerability of the tcg2measuregpttable() function in the Tianocore EDK2 library, caused by buffer overflows, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tcg2measuregpttable function in the Tianocore EDK2 library is caused by buffer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the tcg2measurepeimage() function in the Tianocore EDK2 library, caused by buffer overflows, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tcg2measurepeimage function in the Tianocore EDK2 library is caused by buffer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the SAP Application Interface Framework, a software tool for developing and managing application interfaces, arises from improper code generation. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the SAP Application Interface Framework, a software tool for developing and managing application interfaces, is related to improper code generation. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of data...

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of data...