The vulnerability of the `orangefsdebug_write()` function in the `fs/orangefs/orangefs-debugfs.c` component of the Linux kernel allows a hacker to access confidential data and also trigger a service failure.

The vulnerability of the orangefsdebugwrite function in the fs/orangefs/orangefs-debugfs.c component of the Linux kernel is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service...

The vulnerability of the phy_n.c component in the Linux operating system’s kernel allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the phyn.c component in the Linux operating system’s kernel is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the soc/qcom/socinfo.c component in the Linux operating system allows a hacker to gain access to confidential data and also cause a service failure.

The vulnerability of the soc/qcom/socinfo.c component in the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service failures...

The vulnerability in the net/usb/ipheth.c component of the Linux operating system allows a hacker to gain access to confidential data and also cause a service failure.

The vulnerability in the net/usb/ipheth.c component of the Linux operating system is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service interruptions...

The vulnerability in the “Big Requests” extension of the Wayland protocol for X.Org XWayland, as well as in the implementation of the X.Org Server for the X Window System, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the “Big Requests” extension in the Wayland protocol for X.Org XWayland, as well as in the X.Org Server for the X Window System, is related to a numerical overflow issue. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity...

The vulnerability of the Linux operating system’s kernel components such as drivers/media/i2c/et8ek8/et8ek8 allows attackers to gain access to confidential data and also trigger service failures.

The vulnerability of the drivers/media/i2c/et8ek8/et8ek8 component of the Linux operating system is related to a resource leak. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service failures...

The vulnerability of the ksmbd component in the Linux operating system’s kernel allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ksmbd component in the Linux operating system’s kernel is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the ax25 component in the Linux operating system’s kernel allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ax25 component in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the string_view.h component in the OpenImageIO image processing library allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the stringview.h component in the OpenImageIO image processing library is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the pcf85063_nvmem_read() function in the drivers/rtc/rtc-pcf85063.c kernel module of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the pcf85063nvmemread function in the drivers/rtc/rtc-pcf85063.c component of the Linux operating system is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause servic...

The vulnerability in the driver/md/dm-flakey.c component of the Linux operating system allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the drivers/md/dm-flakey.c component in the Linux operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the decode_utf8 function in the base/gp_utf8.c software component of the Ghostscript document processing software allows an attacker to access confidential data and compromise its integrity.

The vulnerability of the decodeutf8 function in the base/gputf8.c software component of the Ghostscript document processing software is related to deficiencies in checking the path name to the restricted-access directory. Exploiting this vulnerability could allow an attacker to gain access to...

The vulnerability of the Buildah container creation tool, related to errors in checking the path to the catalog, allows a perpetrator to gain access to confidential data.

The vulnerability of the Buildah container creation tool is related to errors in checking the path to the catalog. Exploiting this vulnerability could allow an attacker to gain access to confidential data...

The vulnerability of the proton-pack.c component in the Linux operating system’s kernel allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the proton-pack.c component in the Linux operating system’s kernel is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the geneve_find_dev() function in the drivers/net/geneve.c component of the Linux kernel allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the genevefinddev function in the drivers/net/geneve.c component of the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the erdma_accept_newconn() function in the drivers/infiniband/hw/erdma/erdma_cm.c file of the Linux kernel allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the erdmaacceptnewconn function in the drivers/infiniband/hw/erdma/erdmacm.c file of the Linux kernel is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause...

The vulnerability of the pktgen_thread_write() function in the net/core/pktgen.c component of the Linux kernel allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the pktgenthreadwrite function in the net/core/pktgen.c component of the Linux kernel lies in the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause...

The vulnerability of the net/rose/rose_timer.c component in the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the net/rose/rosetimer.c component in the Linux operating system is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and caus...

IBM Cognos Controller and IBM Controller Encryption Issues Vulnerabilities

IBM Cognos Controller is an enterprise financial consolidation and reporting software from IBM. A security vulnerability exists in IBM Cognos Controller versions 11.0.0 through 11.0.1 and IBM Controller versions 11.1.0 through 11.1.1, which stems from the use of a hard-coded encryption key to sig...

CVE-2025-36326

IBM Cognos Controller 11.0.0 through 11.0.1, and IBM Controller 11.1.0 through 11.1.1 could allow an attacker to obtain sensitive information due to the use of hardcoded cryptographic keys for signing session cookies...