nft_tunnel Component Data Compromise

The vulnerability of the nfttunnel component in the Linux operating system is related to the operation of writing data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux xe_migrate.c Component Data Compromise

The vulnerability of the xemigrate.c component in the Linux operating system is related to integer overflow. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...

Linksys E8450 Wi-Fi Router set_device_language() Function

The vulnerability of the setdevicelanguage function in the portal.cgi script of Linksys E8450 Wi-Fi routers is related to the issue where the operation results outside the buffer in memory when processing the dutlanguage parameter. Exploiting this vulnerability allows an attacker to compromise th...

TOTOLINK A800R downloadFile.cgi RCE

The vulnerability in the downloadFile.cgi subroutine of the TOTOLINK A800R router’s microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibilit...

routing software SetDefaultConnectionService() Data Compromise

The vulnerability of the SetDefaultConnectionService function in microprogrammed routing software such as Linksys WRT1900ACS, EA7200, EA7450, and EA7500 is related to the operation of writing data outside of the buffer in memory when processing the NewDefaultConnectionService parameter...

HexaMorphHash HMH - Homomorphic Hashing for Secure and Efficient Cryptographic Operations in Data Integrity Verification

In the realm of big data and cloud computing, distributed systems are tasked with proficiently managing, storing, and validating extensive datasets across numerous nodes, all while maintaining robust data integrity. Conventional hashing methods, though straightforward, encounter substan tial...

net/smc Component Data Compromise

The vulnerability of the net/smc component in Linux operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of data...

CVE-2025-5832

Pioneer DMH-WT7600NEX Software Update Signing Insufficient Verification of Data Authenticity Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Pioneer DMH-WT7600NEX devices. Authentication is not required to exploit this...

wildfly: unsafe deserialization in Wildfly Enterprise Java Beans

A flaw was found in Wildfly. A remote deserialization attack is possible in the Enterprise Application Beans EJB due to lack of validation/filtering capabilities in wildfly. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availablity...

Linux JFS dbAllocBits Heap Buffer Overflow

The vulnerability of the dbAllocBits function in the fs/jfs/jfsdmap.c module of the Linux file system support module JFS is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux kernel Btrfs __get_cur_name_and_parent function Data Compromise

The vulnerability of the getcurnameandparent function in the fs/btrfs/send.c module of the Linux file system support module is related to copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromi...

JFS File System Heap Buffer Overflow DoS

The vulnerability of the dtSplitRoot function in the fs/jfs/jfsdtree.c module of the Linux operating system’s file system support module is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

Linux RISC-V arch_prepare_bpf_trampoline Heap Buffer Overflow DoS

The vulnerability of the archpreparebpftrampoline function in the arch/riscv/net/bpfjitcomp64.c module on RISC-V architecture processors in Linux systems is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

iocg_pay_debt Heap Buffer Overflow DoS

The vulnerability of the iocgpaydebt function in the block/blk-iocost.c module, which supports the block-level kernel in the Linux operating system, is related to incorrect validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

ROS-20250625-07

Vulnerability of translate function from translationhelper.rb of Ruby on Rails software platform is related to flaws in the measures used to protect web page structures. Exploitation of the vulnerability allows an attacker acting remotely to affect data integrity...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation via the crc32big function, which clones from zlib but did not receive the security patch. An attacker can cause unintended behavior or potentially compromise data integrity by exploiting improper handling of...

AMI MegaRAC SP-X Authentication Bypass

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers relates to the bypassing of authentication processes. Exploiting this vulnerability allows a malicious actor to influence the confidentiality, integrity, and accessibility of the protected information...

Netgear EX6200 sub_3C8EC Heap Buffer Overflow

The vulnerability of the sub3C8EC function in the microprogramming software of the dual-band Wi-Fi amplifier Netgear EX6200 is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to influence the confidentiality,...

SAP S/4HANA OData Data Compromise

The vulnerability of the OData function in the SAP S/4HANA software platform is related to the falsification of cross-site requests. Exploiting this vulnerability could allow a malicious actor to influence the integrity and confidentiality of the protected information...

Linux alloc_flex_gd Buffer Overflow

The vulnerability of the allocflexgd function in the fs/ext4/resize.c module of the Linux operating system is related to a single-byte offset error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...