D-Link DIR-619L Router formAdvFirewall Buffer Overflow

The vulnerability of the formAdvFirewall function /goform/formAdvFirewall of the D-Link DIR-619L router software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, a...

D-Link DIR-605L Router FormWlanSetup Data Compromise

The vulnerability of the formWlanSetup function /goform/formWlanSetup in D-Link DIR-605L router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of...

D-Link DIR-605L Router formSetEnableWizard Function Use-After-Free

The vulnerability of the formSetEnableWizard /goform/formSetEnableWizard function in D-Link DIR-605L router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...

Google Chrome Microsoft Edge Data Compromise

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially crafte...

Microsoft Edge Heap Buffer Overflow DoS

The vulnerability of Microsoft Edge relates to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Adaptec AAC RAID Kernel Buffer Overflow DoS

The vulnerability of the aacinitadapter function in the drivers/scsi/aacraid/comminit.c file of the Adaptec AACRAID driver for Linux operating systems is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...

Linux Intel network adapter driver Heap Buffer Overflow DoS

The vulnerability of the idpfvportopen function in the drivers/net/ethernet/intel/idpf/idpflib.c file of the Intel network adapter driver for the Linux operating system is related to the reutilization of previously freed memory and memory leaks. Exploiting this vulnerability could allow an attack...

Linux NVMe Driver Use-After-Free

The vulnerability of the nvmecleanupcmd function in the drivers/nvme/host/core.c file of the Linux NVMe kernel driver is related to the reallocation of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

f2fs kernel gc_data_segment Heap Buffer Overflow DoS

The vulnerability of the gcdatasegment function in the fs/f2fs/gc.c module of the Linux kernel’s file system f2fs is related to the lack of input validation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux fcntl_setlk() Data Compromise

The vulnerability of the fcntlsetlk function in the fs/locks.c module of the Linux operating system is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

cachefiles file system Heap Buffer Overflow DoS

The vulnerability of the cachefileswithdrawvolumes function in the fs/cachefiles/cache.c file of the Linux kernel’s cachefiles file system is related to the reutilization of previously freed memory due to competitive access to resources race condition. Exploiting this vulnerability could allow an...

nilfs2 File System Heap Buffer Overflow DoS

The vulnerability of the nilfscheckfolio function in the fs/nilfs2/dir.c file of the Linux kernel’s file system nilfs2 is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...

AMD Sensor Fusion Hub Driver Heap Buffer Overflow DoS

The vulnerability of the amdtphidremove function in the drivers/hid/amd-sfh-hid/amdsfhhid.c file of the AMD Sensor Fusion Hub driver for the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise th...

Linux bpf_link_free Heap Buffer Overflow DoS

The vulnerability of the bpflinkfree function in the Linux operating system’s kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

QLogic kernel Linux Structure Compromise Data Compromise

The vulnerability of the bnx2xfwstatsReq structure in the drivers/net/ethernet/broadcom/bnx2x/bnx2x.h file of the QLogix bnx2 driver for the Linux operating system is related to incorrect calculation of the index. Exploiting this vulnerability could allow an attacker to compromise the...

Linux kernel Network Scheduling Buffer Overflow DoS

The vulnerability of the netemdequeue function in the net/sched/schnetem.c module of the Linux operating system’s network scheduling subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Critical vulnerability in multiple SICK products

A critical vulnerability has been discovered in the .sdd files of several SICK products. This vulnerability could allow a remote, unauthenticated attacker to gain access to the "Authorized Client" user role, potentially impacting the availability and integrity of the affected SICK products. Users...

CVE-2024-45219 Apache CloudStack: Uploaded and registered templates and volumes can be used to abuse KVM-based infrastructure

Account users in Apache CloudStack by default are allowed to upload and register templates for deploying instances and volumes for attaching them as data disks to their existing instances. Due to missing validation checks for KVM-compatible templates or volumes in CloudStack 4.0.0 through 4.18.2....

CVE-2024-45219 Apache CloudStack: Uploaded and registered templates and volumes can be used to abuse KVM-based infrastructure

Account users in Apache CloudStack by default are allowed to upload and register templates for deploying instances and volumes for attaching them as data disks to their existing instances. Due to missing validation checks for KVM-compatible templates or volumes in CloudStack 4.0.0 through 4.18.2....

Linux kernel s390 dasd_ese_needs_format Buffer Overflow

The vulnerability of the dasdeseneedsformat function in the drivers/s390/block/dasd.c module of the Linux operating system’s kernel on the s390 platform is related to memory writing beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the...