12405 matches found
iommu: Clear iommu-dma ops on cleanup
...
drm/amd/display: Do not return negative stream id for array
...
drm/amd/display: Add a dc_state NULL check in dc_state_release
...
virtiofs: use pages instead of pointer for kernel direct IO
...
drm/amd/display: Adding array index check to prevent memory corruption
...
drm/amd/display: Handle dml allocation failure to avoid crash
...
drm/amd: check num of link levels when update pcie param
...
RDMA/mlx5: Fix a WARN during dereg_mr for DM type
...
drm/xe/ufence: Prefetch ufence addr to catch bogus address
...
drm/amd/display: Fix NULL pointer dereference for DTN log in DCN401
...
CVE-2025-58597
Summary of CVE-2025-58597 : Affected product is wpForo Forum. Root cause: authorization bypass via a user-controlled key due to incorrectly configured access control security levels. Impact, per provided details: unauthorized access may be possible through such a key, affecting versions wpForo Fo...
CVE-2025-58597 WordPress wpForo Forum Plugin <= 2.4.6 - Insecure Direct Object References (IDOR) Vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Tomdever wpForo Forum wpforo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpForo Forum: from n/a through = 2.4.6...
CVE-2024-13063
Summary: CVE-2024-13063 affects Akinsoft MyRezzta (web application). An authorization bypass via a user-controlled key enables forceful browsing (IDOR) against the product. The vulnerability’s affected range is stated as MyRezzta versions from s2.02.02 before v2.05.01; upgrading to v2.05.01 or ne...
CVE-2024-13063 IDOR in Akinsoft's MyRezzta
Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft MyRezzta allows Forceful Browsing. This issue affects MyRezzta: from s2.02.02 before v2.05.01...
Linux Distros Unpatched Vulnerability : CVE-2021-21324
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI befor...
Linux Distros Unpatched Vulnerability : CVE-2020-27663
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GLPI before 9.5.3, ajax/getDropdownValue.php has an Insecure Direct Object Reference IDOR vulnerability that allows an attacker to read data from any itemTyp...
PT-2025-40071
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's networking subsystem, specifically within the Xilinx Axienet driver. Insufficient error handling during retrieval of RX metadata pointers can lead to...
Linux Distros Unpatched Vulnerability : CVE-2020-27662
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GLPI before 9.5.3, ajax/comments.php has an Insecure Direct Object Reference IDOR vulnerability that allows an attacker to read data from any database table...
CVE-2025-56254
PHPGurukul Employee Leave Management System 2.1 contains an Insecure Direct Object Reference IDOR vulnerability in leave-details.php. An authenticated user can change the leaveid parameter in the URL to access leave application details of other users...
CVE-2025-56254
PHPGurukul Employee Leave Management System 2.1 contains an Insecure Direct Object Reference IDOR vulnerability in leave-details.php. An authenticated user can change the leaveid parameter in the URL to access leave application details of other users...