HDF5 Heap Buffer Overflow DoS

The vulnerability of the H5Aattrreleasetable function in the H5Aint.c file of the HDF5 library is related to the use of an uninitialized variable. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected informati...

HDF5 H5VM memcpy buffer overflow

The vulnerability of the H5VMmemcpyvv function in the H5VM.c file of the HDF5 library is related to buffer overflow in the queue. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

HDF5 Heap Buffer Overflow DoS

The vulnerability of the H5Tbitfind function in the HDF5 library is related to buffer overflow in the queue. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

HDF5 Heap Buffer Overflow DoS

The vulnerability of the H5Zfilterfletcher32 function in the HDF5 library is related to buffer overflow in the queue. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Avora Isolation Component Privilege Escalation

The vulnerability of the “Avora” operating system’s isolation component is related to the lack of control over permissions for applications accessing temporary folders. Exploiting this vulnerability can lead to breaches of data confidentiality, integrity, and accessibility...

Aurora Validation Component Data Compromise

The vulnerability of the validation component of the “Avora” operating system is related to the lack of control over the names of the installed application files. Exploiting this vulnerability can lead to breaches of data confidentiality, integrity, and accessibility...

Linux RDMA/cma Data Compromise

The vulnerability of the RDMA/cma component of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

arc_emac Component Data Compromise

The vulnerability of the arcemac component in the Linux operating system’s kernel is related to the use of memory after deallocation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

Apache ZooKeeper Buffer Overflow

The vulnerability of the centralized service for supporting information about configuration, naming, distributed synchronization, and providing group services in Apache ZooKeeper is related to the use of the “cmd:” packet-mode syntax. Exploiting this vulnerability allows a malicious actor to...

Linux watch_queue Component Heap Buffer Overflow DoS

The vulnerability of the watchqueuesetfilter function in the Linux operating system’s watchqueue component is related to memory overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

pgjdbc Input Validation

The vulnerability of the JDBC driver pgjdbc, which allows Java programs to connect to PostgreSQL databases, is related to the creation of arbitrary files. Exploiting this vulnerability can enable a malicious actor to compromise the confidentiality, integrity, and accessibility of protected...

SLPD Lite OpenBMC Data Compromise

The vulnerability of the SLP UDP server slpd-lite in the OpenBMC operating system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to compromise privacy, integrity, and accessibility by sending a specially...

Tenda i22 Router Data Compromise

The vulnerability of the formApPortalOneKeyAuth function in the Tenda i22 router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

CVE-2023-20591

Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker to read or modify hypervisor memory, potentially resulting in loss of confidentiality, integrity, and availability...

TOTOLINK N350RT Router setWizardCfg Function

The vulnerability of the setWizardCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK N350RT router microprogramming system is related to the issue of data being written outside of the buffer in memory when processing the ssid parameter. Exploiting this vulnerability allows an attacker ...

Google Nest Wifi Buffer Overflow

The vulnerability of microprogrammed network devices from Google Nest Wifi relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

CVE-2024-5712

A Cross-Site Request Forgery CSRF vulnerability was identified in the stitionai/devika application, affecting the latest version. This vulnerability allows attackers to perform unauthorized actions in the context of a victim's browser, such as deleting projects or changing application settings,...

Linux kernel USB driver Disable Show Store Buffer Overflow DoS

The vulnerability of the disableshow,store functions in the drivers/usb/core/port.c file of the Linux kernel’s USB driver is related to an infinite waiting loop for resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

LiteUART driver Heap Buffer Overflow DoS

The vulnerability of the liteuartremove function in the drivers/tty/serial/liteuart.c file of the Linux kernel’s LiteUART driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux Bluetooth Kernel msft_do_close() Buffer Overflow DoS

The vulnerability of the msftdoclose function in the net/bluetooth/msft.c module of the Linux operating system’s Bluetooth protocol implementation is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker...