Ext4 File System Heap Buffer Overflow DoS

The vulnerability of the ext4getfirstdirblock function in the fs/ext4/namei.c module of the Ext4 file system support in Linux’s operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

tpm-chip.c Heap Buffer Overflow DoS

Vulnerability of the tpmdevrelease function in the drivers/char/tpm/tpm-chip.c module – The driver for supporting alphanumeric devices with TPM cores in Linux operating systems is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker ...

Linux uvc_status_init Heap Buffer Overflow DoS

The vulnerability of the uvcstatusinit function in the Linux operating system is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux nci_hci_create_pipe() nci_hci_connect_gate() Data Compromise

The vulnerabilities of the ncihcicreatepipe and ncihciconnectgate functions in the Linux operating system are related to writing beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and accessibility of the...

Linux virtio_net Buffer Overflow DoS

The vulnerability in the drivers/net/virtionet.c module of the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Linux kernel Data Compromise

The vulnerability of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux bpf_trampoline_get_progs Buffer Overflow DoS

The vulnerability of the bpftrampolinegetprogs function in the Linux operating system’s kernel is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux retract_page_tables() Buffer Overflow

The vulnerability of the retractpagetables function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

AI Agents Need Data Integrity

Think of the Web as a digital territory with its own social contract. In 2014, Tim Berners-Lee called for a "Magna Carta for the Web" to restore the balance of power between individuals and institutions. This mirrors the original charter's purpose: ensuring that those who occupy a territory have ...

Linux Distros Unpatched Vulnerability : CVE-2025-5987

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to exhaust the heap space, this error is not detected...

libvpx: Integer overflow in vpx_img_alloc()

A flaw was found in libvpx. When creating images, libvpx trusts the width, height, and alignment of the user input. However, it does not properly validate the provided values. This flaw allows an attacker to craft user inputs or trick the user into opening crafted files, where these types of valu...

boa HTTP Server Data Compromise

The vulnerability of the built-in web server component boa /boafrm/formTmultiAP of the HTTP POST Request Handler in the microprogramming software for TOTOLINK A3002R and A3002RU routers is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability...

TOTOLINK A810R downloadFile.cgi RCE

The vulnerability of the downloadFile.cgi file in the TOTOLINK A810R router microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the...

TOTOLINK A800R downloadFile.cgi RCE

The vulnerability in the downloadFile.cgi subroutine of the TOTOLINK A800R router’s microprogramming software relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

CVE-2025-5417

The CVE-2025-5417 entry describes an insufficient access control vulnerability in the Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image. The issue allows a cluster admin/user with standard access, and the Red Hat Developer Hub namespace, to access and modify the image’s content, impacting...

CVE-2025-5417

An insufficient access control vulnerability was found in the Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image. The Red Hat Developer Hub cluster admin/user, who has standard user access to the cluster, and the Red Hat Developer Hub namespace, can access the rhdh/rhdh-hub-rhel9 container...

CVE-2025-5417 Rhdh: red hat developer hub user permissions

An insufficient access control vulnerability was found in the Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image. The Red Hat Developer Hub cluster admin/user, who has standard user access to the cluster, and the Red Hat Developer Hub namespace, can access the rhdh/rhdh-hub-rhel9 container...

CVE-2025-5417 Rhdh: red hat developer hub user permissions

An insufficient access control vulnerability was found in the Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image. The Red Hat Developer Hub cluster admin/user, who has standard user access to the cluster, and the Red Hat Developer Hub namespace, can access the rhdh/rhdh-hub-rhel9 container...

Linux Distros Unpatched Vulnerability : CVE-2018-5709

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in MIT Kerberos 5 aka krb5 through 1.16. There is a variable dbentry-nkeydata in kadmin/dbutil/dump.c that can store 16-bit data but...

Linux Distros Unpatched Vulnerability : CVE-2021-20179

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again,...