The vulnerability of the cpufreq component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the cpufreq component in the Linux operating system’s kernel is related to improper validation of input in the functions cpufreqoffline and cpufreqremovedev. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE CVE-2022-48636

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix Oops in dasdaliasgetstartdev due to missing pavgroup Fix Oops in dasdaliasgetstartdev function caused by the pavgroup pointer being NULL. The pavgroup pointer is checked on the entrance of the function but without...

The vulnerability of the pci_disable_device function in the ixgbe component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the pcidisabledevice function in the ixgbe component of Linux operating systems is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2023-6232

Buffer overflow in the Address Book username process in authentication of Mobile Device Function of Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.: Satera LBP670C...

CVE-2023-6230

Buffer overflow in the Address Book password process in authentication of Mobile Device Function of Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.: Satera LBP670C...

CVE-2023-6232

Buffer overflow in the Address Book username process in authentication of Mobile Device Function of Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.: Satera LBP670C...

CVE-2023-6232

Buffer overflow in the Address Book username process in authentication of Mobile Device Function of Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.: Satera LBP670C...

CVE-2023-6230

Buffer overflow in the Address Book password process in authentication of Mobile Device Function of Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.: Satera LBP670C...

PT-2024-13230 · Westermo · Westermo Lynx

Name of the Vulnerable Software and Affected Versions: Westermo Lynx affected versions not specified Description: A potential attacker with access to the Westermo Lynx device could execute malicious code, affecting the device's correct functioning. Recommendations: At the moment, there is no...

PT-2024-14903 · Canon · Color Imageclass Lbp674C +9

Name of the Vulnerable Software and Affected Versions: Satera LBP670C Series versions v03.07 and earlier Satera MF750C Series versions v03.07 and earlier Color imageCLASS LBP674C versions v03.07 and earlier Color imageCLASS X LBP1333C versions v03.07 and earlier Color imageCLASS MF750C Series...

CVE-2023-38255

A potential attacker with or without cookie theft access to the device would be able to include malicious code XSS when uploading new device configuration that could affect the intended function of the device...

PT-2022-36296 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: drbd versions prior to v5.10.156 Description: A use after free issue exists in the drbd create device function. The actual impact and attack plausibility have not yet been proven. Recommendations: For versions prior to v5.10.156, update to...

PT-2021-29627

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.13.6 Description The issue concerns error handling code in the hso create net device function. It was introduced in version v5.9 and fixed in version v5.13.6. The actual impact and attack plausibility have not...

PT-2021-29708

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.54 Description The issue concerns error handling code in the hso create net device function. It was introduced in version v5.9 and fixed in version v5.10.54. The actual impact and attack plausibility have n...

Android Resource Management Error Vulnerability (CNVD-2020-44616)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A resource management error vulnerability exists in the cdevget of the chardev.c file in Android. An attacker can exploit this vulnerability to elevate privileges...

CVE-2019-19194

The Bluetooth Low Energy Secure Manager Protocol SMP implementation on Telink Semiconductor BLE SDK versions before November 2019 for TLSR8x5x through 3.4.0, TLSR823x through 1.3.0, and TLSR826x through 3.3 devices installs a zero long term key LTK if an out-of-order link-layer encryption request...

MiniUPnP MiniSSDPd Resource Management Error Vulnerability

MiniSSDPd is a daemon for managing SSDPs on Posix systems. A resource management error vulnerability exists in the 'updateDevice' function of the minissdpd.c file in MiniUPnP MiniSSDPd versions 1.4 and 1.5. The vulnerability stems from the mismanagement of system resources e.g., memory, disk spac...

CVE-2017-17028: Improper Restriction of Operations within the Bounds of a Memory Buffer

A buffer overflow vulnerability in external device function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 Beta 2 build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices...

PT-2017-14672

Name of the Vulnerable Software and Affected Versions QNAP QTS versions 4.2.6 build 20171026 through 4.3.4.0387 Beta 2 build 20171116 and earlier Description A buffer overflow issue in the external device function could allow remote attackers to execute arbitrary code on NAS devices...