15 matches found
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: gpio: aggregator: Protect driver attr handlers against module unload Both newdevicestore and deletedevicestore access module global resources e.g., gpioaggregatorlock. To prevent race conditions during module unloading, a...
BIT-PARSE-2026-100631 Parse Server 9.0.0 Unauthenticated Installation Deletion via Operator Injection
Parse Server is an open source backend server. In versions prior to 8.6.90 and in versions from 9.0.0 prior to 9.10.1, the device token deduplication logic for installation records does not validate the type of client-supplied installation fields before using them to build database queries. An...
PT-2026-105126
Parse Server is an open source backend server. In versions prior to 8.6.90 and in versions from 9.0.0 prior to 9.10.1, the device token deduplication logic for installation records does not validate the type of client-supplied installation fields before using them to build database queries. An...
CVE-2026-100631
Parse Server is an open source backend server. In versions prior to 8.6.90 and in versions from 9.0.0 prior to 9.10.1-alpha.9, the device token deduplication logic for installation records does not validate the type of client-supplied installation fields before using them to build database querie...
PT-2025-33687 · Totolink · Totolink A3002Ru
Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002R version 4.0.0-B20230531.1404 Description: A buffer overflow exists in the hostname parameter at the /boafrm/formMapDelDevice API endpoint of the TOTOLINK A3002R router. This issue allows attackers to cause a Denial of Service...
SUSE CVE-2025-21943
In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: protect driver attr handlers against module unload Both newdevicestore and deletedevicestore touch module global resources e.g. gpioaggregatorlock. To prevent race conditions with module unload, a reference need...
AZL-59748 CVE-2025-21943 affecting package kernel for versions less than 5.15.180.1-1
In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: protect driver attr handlers against module unload Both newdevicestore and deletedevicestore touch module global resources e.g. gpioaggregatorlock. To prevent race conditions with module unload, a reference need...
AZL-59912 CVE-2025-21943 affecting package kernel for versions less than 6.6.85.1-2
In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: protect driver attr handlers against module unload Both newdevicestore and deletedevicestore touch module global resources e.g. gpioaggregatorlock. To prevent race conditions with module unload, a reference need...
PT-2025-14324
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the gpio aggregator driver. The issue arises when the new device store and delete device store handlers touch module...
PT-2021-25584
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.17 through 4.19.195 Description: A memory leak issue was discovered in the nilfs2 file system. The issue is related to the nilfs sysfs delete device group function. The actual impact and attack plausibility have not ye...
PT-2021-25590
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.17 through 5.4.128 Description: A memory leak issue was discovered in the nilfs2 file system. The issue is related to the nilfs sysfs delete device group function. The actual impact and attack plausibility have not yet...
CVE-2019-0016
A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions obtained from another legitimate delete action performed by another administrative user. Affected releases are Juniper Networks Junos Spac...
CVE-2019-0016: Undefined Security Weakness
A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions obtained from another legitimate delete action performed by another administrative user. Affected releases are Juniper Networks Junos Spac...
PT-2019-1357
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos Space versions prior to 18.3R1 Description The issue is related to insufficient access control in the Juniper Networks Junos Space platform. It allows a malicious authenticated user to delete a device from the Junos Spac...
