The vulnerability of the iwl_dbg_tlv_overrideTrigNode() function in the Intel iwlwifi wireless communication adapter driver for Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the function iwldbgtlvoverrideTrigNode in the driver drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.c of the Intel iwlwifi wireless adapter driver for the Linux operating system is related to writing beyond the allocated buffer. Exploitation of this vulnerability could allow ...

The vulnerability of the ksmbd_nl_policy() function in the implementation of the SMB (Server Message Block) protocol within the in-core CIFS/SMB3-server ksmbd server of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ksmbdnlpolicy function in the fs/smb/server/transportipc.c module, which is part of the Server Message Block network protocol implementation in the ksmbd server kernel of the Linux operating system, relates to memory reading beyond the allocated buffer. Exploiting this...

The vulnerability of the NTFS3 file system driver in Linux operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information, or enhance their own privileges.

The vulnerability of the NTFS3 file system driver in Linux operating systems is related to the reallocation of previously released memory due to competitive access to resources during operations like remount and unmount. Exploiting this vulnerability allows an attacker to compromise the...

CVE-2024-32978 Kaminari Insecure File Permissions Vulnerability

Kaminari is a paginator for web app frameworks and object relational mappings. A security vulnerability involving insecure file permissions has been identified in the Kaminari pagination library for Ruby on Rails, concerning insecure file permissions. This vulnerability is of moderate severity du...

CVE-2024-32978

CVE-2024-32978 affects the Kaminari pagination library for Ruby on Rails, via insecure file permissions that could allow unauthorized write access to specific Ruby files. The published guidance specifies upgrading to Kaminari 0.16.2 or later, where file permissions were adjusted to improve securi...

CVE-2024-32978 Kaminari Insecure File Permissions Vulnerability

Kaminari is a paginator for web app frameworks and object relational mappings. A security vulnerability involving insecure file permissions has been identified in the Kaminari pagination library for Ruby on Rails, concerning insecure file permissions. This vulnerability is of moderate severity du...

CVE-2024-32978

Kaminari is a paginator for web app frameworks and object relational mappings. A security vulnerability involving insecure file permissions has been identified in the Kaminari pagination library for Ruby on Rails, concerning insecure file permissions. This vulnerability is of moderate severity du...

The vulnerability of the frmL7PlotForm function in the microprogramming software for Tenda W30E allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromDhcpListClient function in the Tenda W30E router software relates to the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected informatio...

The vulnerability of the blkpg_do_ioctl() function in the block/ioctl.c driver for block devices in the Linux operating system allows a attacker to compromise the integrity and accessibility of the protected information.

The vulnerability of the blkpgdoioctl function in the block/ioctl.c driver for block devices in the Linux operating system is related to the lack of correspondence between the sizes of partitions and the sizes of blocks. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the JavaFx component in the Oracle GraalVM Enterprise Edition virtual machine and the Oracle Java SE software platform allows attackers to compromise data integrity.

The vulnerability of the JavaFx component in the Oracle GraalVM Enterprise Edition and the Oracle Java SE software platform is related to improper authentication. Exploiting this vulnerability can allow an attacker to compromise data integrity remotely...

The vulnerability of the JavaFX component of the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine allows attackers to compromise data integrity.

The vulnerability of the JavaFX component of Oracle Java SE and the Oracle GraalVM Enterprise Edition virtual machine is a flaw in the authentication process. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

The vulnerability of the formwrlSSIDget function in the microprogramming software for Tenda i21 allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formwrlSSIDget /goform/wifiSSIDget function in Tenda i21 router software arises due to buffer overflow during the processing of the ssidIndex parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the...

BELL-CVE-2023-52798

Bulletin has no description...

kernel: ip6mr: Fix skb_under_panic in ip6mr_cache_report()

A buffer underwrite vulnerability exists in the linux kernel in the function skbunderpanic in ip6mrcachereport, leading to an attacker, via crafting a payload, could result in damage to system availability and integrity...

kernel: scsi: target: Fix multiple LUN_RESET handling

A race condition flaw was found in the Linux kernel SCSI target subsystem's LUNRESET handling. When multiple remote initiator sessions send concurrent LUNRESET commands, one session's reset can incorrectly drain commands from another session, causing the second session to receive a successful res...

openssh: scp allows command injection when using backtick characters in the destination argument

A flaw was found in the scp program shipped with the openssh-clients package. An attacker having the ability to scp files to a remote server, could execute arbitrary commands on the remote server by including the command as a part of the filename being copied on the server. This command is run wi...

ROS-20240521-09

A vulnerability in the JSSE component of the Oracle Java SE software platform and Oracle GraalVM virtual machine. Enterprise Edition is related to the lack of message integrity checking. Exploitation of the vulnerability could allow an attacker acting remotely to disclose protected information or...

ROS-20240521-10

A vulnerability in the JSSE component of the Oracle Java SE software platform and Oracle GraalVM virtual machine. Enterprise Edition is related to the lack of message integrity checking. Exploitation of the vulnerability could allow an attacker acting remotely to disclose protected information or...

The vulnerability of the PowerScale OneFS operating system, related to insufficient validation of input data, allows attackers to compromise the integrity of protected information.

The vulnerability of the PowerScale OneFS operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of the protected information...

ROS-20240521-11

A vulnerability in the JSSE component of the Oracle Java SE software platform and Oracle GraalVM virtual machine. Enterprise Edition is related to the lack of message integrity checking. Exploitation of the vulnerability could allow an attacker acting remotely to disclose protected information or...