Linux amdkfd_free_gtt_mem Heap Buffer Overflow DoS

The vulnerability of the amdkfdfreegttmem function in the driver /drivers/gpu/drm/amd/amdgpu/amdgpuamdkfd.c of the Linux kernel lies in the reuse of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Ethernet Frame Handler Kernel Code Buffer Overflow

The vulnerability of the skbputpadto function in the Ethernet Frame Handler driver’s source code at /drivers/net/ethernet/lantiqetop.c in the Linux kernel involves copying buffers without checking their size. This constitutes a classic buffer overflow attack. Exploiting this vulnerability could...

TOTOLINK EX1200T Router boa server FormSysLog Data Compromise

The vulnerability of the built-in boa server /boafrm/formSysLog of the TOTOLINK EX1200T router’s microprogramming system is related to the issue of the operation exceeding the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability allows a malicious actor to...

TOTOLINK T10 Router SetWizardCfg Function

The vulnerability of the setWizardCfg function /cgi-bin/cstecgi.cgi of the TOTOLINK T10 router software is related to the issue of data being written outside the buffer in memory when processing the parameter ssid5g. Exploiting this vulnerability allows a malicious actor to compromise the...

TOTOLINK EX1200T Router boa Server Command Injection

The vulnerability of the built-in server boa /boafrm/formSysCmd of the TOTOLINK EX1200T router’s microprogramming system lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and...

IBM OpenPages Web Interface Data Compromise

The vulnerability of the web interface of IBM OpenPages and IBM OpenPages with Watson relates to the lack of traceability in the trust chain during certificate verification. Exploitation of this vulnerability could allow a malicious actor, operating remotely, to compromise the integrity of the...

TencentOS Server 2: grub2 (TSSA-2022:0288)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0288 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

TencentOS Server 4: linux-firmware (TSSA-2024:0439)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0439 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

TOTOLINK EX1200T Web Server Buffer Overflow

The vulnerability of the built-in web server boa /boafrm/formFilter of TOTOLINK EX1200T routers is caused by buffer overflow. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information by sending a specially crafte...

AVEVA PI Data Archive Data Compromise

The vulnerability of the AVEVA PI Data Archive database management system is related to an error in processing exceptional states. Exploiting this vulnerability could allow a malicious actor to trigger service failures and compromise the integrity of the protected information...

Cisco WebEx Meetings Data Compromise

The vulnerability of Cisco Webex Meetings software client services relates to the loading of unreliable external data alongside reliable data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information...

TOTOLINK X15 Router Web Server Buffer Overflow

The vulnerability of the built-in web server boa /boafrm/formWlanRedirect of the TOTOLINK X15 router’s microprogramming software is related to the copying of buffers without checking the size of input data during the processing of the redirect-url parameter. Exploiting this vulnerability allows a...

Cisco Secure Network Analytics Manager Network Detection Response Compromise Data

The vulnerability of the API components of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager relates to improper authentication. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

Self-Service Portal Data Compromise

The vulnerability of the cloud-based Self-Service Portal service, which is designed to protect applications from unauthorized users and Cisco Duo devices, stems from the lack of data cleansing measures at the management level. Exploiting this vulnerability could allow a malicious actor to...

Tenda AC9 HTTP POST Request Handler Component

The vulnerability of the HTTP POST Request Handler component of the fromadvsetlanip function in the Tenda AC9 router’s microprogramming system is related to buffer overflow in the stack during the processing of the lanMask parameter. Exploiting this vulnerability allows an attacker to compromise...

TOTOLink T10 Router UploadCustomModule Function Use-After-Free

The vulnerability of the UploadCustomModule function in the TOTOLink T10 router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

PT-2025-25322 · Sick Ag · Sick Field Analytics

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A service supports the use of a deprecated and unsafe TLS version. This could be exploited to expose sensitive information, modify data in unexpected ways or spoof identities of other users ...

General Oracle Secure Backup Data Compromise

The vulnerability of the General component of Oracle Secure Backup is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Web Access Component Data Compromise

The vulnerability of the Web Access component of the Oracle Primavera P6 Enterprise Project Portfolio Management application relates to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

io.quarkus.http/quarkus-http-core: Quarkus HTTP Cookie Smuggling

A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leading to unauthorize...