The vulnerability of the formWlanSetup function (/goform/formWlanSetup) in D-Link DIR-605L router software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formWlanSetup function /goform/formWlanSetup in D-Link DIR-605L router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the aac_init_adapter() function in Adaptec AAC RAID Linux kernel allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the aacinitadapter function in the drivers/scsi/aacraid/comminit.c file of the Adaptec AACRAID driver for Linux operating systems is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the idpf_vport_open function in the Linux operating system’s Intel network adapter driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the idpfvportopen function in the drivers/net/ethernet/intel/idpf/idpflib.c file of the Intel network adapter driver for the Linux operating system is related to the reutilization of previously freed memory and memory leaks. Exploiting this vulnerability could allow an attack...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially crafte...

The vulnerability of Microsoft Edge browsers, related to overflowing dynamic memory buffers, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Microsoft Edge relates to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the amdtp_hid_remove() function in the AMD Sensor Fusion Hub driver for Linux operating systems allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the amdtphidremove function in the drivers/hid/amd-sfh-hid/amdsfhhid.c file of the AMD Sensor Fusion Hub driver for the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise th...

The vulnerability of the nvme_cleanup_cmd() function in the Linux operating system’s NVMe driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the nvmecleanupcmd function in the drivers/nvme/host/core.c file of the Linux NVMe kernel driver is related to the reallocation of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

The vulnerability of the cachefiles_withdraw_volumes() function in the cachefiles file system of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cachefileswithdrawvolumes function in the fs/cachefiles/cache.c file of the Linux kernel’s cachefiles file system is related to the reutilization of previously freed memory due to competitive access to resources race condition. Exploiting this vulnerability could allow an...

The vulnerability of the fcntl_setlk() function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fcntlsetlk function in the fs/locks.c module of the Linux operating system is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the nilfs_check_folio() function in the nilfs2 file system of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nilfscheckfolio function in the fs/nilfs2/dir.c file of the Linux kernel’s file system nilfs2 is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...

The vulnerability of the gc_data_segment() function in the file system of the f2fs kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the gcdatasegment function in the fs/f2fs/gc.c module of the Linux kernel’s file system f2fs is related to the lack of input validation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the bnx2x_fw_stats_req structure in the QLogic operating system kernel for Linux allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bnx2xfwstatsReq structure in the drivers/net/ethernet/broadcom/bnx2x/bnx2x.h file of the QLogix bnx2 driver for the Linux operating system is related to incorrect calculation of the index. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the bpf_link_free() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bpflinkfree function in the Linux operating system’s kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the netem_dequeue() function in the Linux kernel’s network scheduling subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the netemdequeue function in the net/sched/schnetem.c module of the Linux operating system’s network scheduling subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Critical vulnerability in multiple SICK products

A critical vulnerability has been discovered in the .sdd files of several SICK products. This vulnerability could allow a remote, unauthenticated attacker to gain access to the "Authorized Client" user role, potentially impacting the availability and integrity of the affected SICK products. Users...

CVE-2024-45219 Apache CloudStack: Uploaded and registered templates and volumes can be used to abuse KVM-based infrastructure

Account users in Apache CloudStack by default are allowed to upload and register templates for deploying instances and volumes for attaching them as data disks to their existing instances. Due to missing validation checks for KVM-compatible templates or volumes in CloudStack 4.0.0 through 4.18.2....

CVE-2024-45219 Apache CloudStack: Uploaded and registered templates and volumes can be used to abuse KVM-based infrastructure

Account users in Apache CloudStack by default are allowed to upload and register templates for deploying instances and volumes for attaching them as data disks to their existing instances. Due to missing validation checks for KVM-compatible templates or volumes in CloudStack 4.0.0 through 4.18.2....

The vulnerability of the SAP Business Objects Business Intelligence Platform lies in its ability to download files of a dangerous type without limit, allowing attackers to compromise the integrity of the protected information.

The vulnerability of the SAP Business Objects Business Intelligence Platform relates to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

The vulnerability of the sanity_check_extent_cache() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sanitycheckextentcache function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the dasd_ese_needs_format() function in the Linux operating system’s kernel on the s390 platform allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the dasdeseneedsformat function in the drivers/s390/block/dasd.c module of the Linux operating system’s kernel on the s390 platform is related to memory writing beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the...