PT-2024-18171 · Faronics · Faronics Deep Freeze Server Standard

Name of the Vulnerable Software and Affected Versions: Faronics Deep Freeze Server Standard versions 8.30.020.4627 and earlier Description: A search path or unquoted item vulnerability affects the DFServ.exe file, allowing an attacker with local user privileges to replace the legitimate DFServ.ex...

PT-2024-5632 · Dell · Dell Alienware Command Center

Name of the Vulnerable Software and Affected Versions: Dell Alienware Command Center versions 5.5.52.0 and prior Description: The issue is related to improper access control, which can lead to a Denial of Service on the local system. Exploitation of this issue may allow an attacker to cause a...

The vulnerability of the fromSetLPMacBind() function in the Tenda AC9 router’s microprogramming software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromSetLPMacBind function in the Tenda AC9 router’s microprogramming system relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service failures...

The vulnerability of the mlxsw_sp_acl_tcam_init() function in the drivers/net/ethernet/mellanox/mlxsw/spectrum_acl_tcam.c file of the Mellanox network card driver for the Linux operating system allows a attacker to cause a service failure or exert other effects.

The vulnerability of the mlxswspacltcaminit function in the drivers/net/ethernet/mellanox/mlxsw/spectrumacltcam.c file of the Mellanox network card driver for the Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a system...

The vulnerabilities of functions map_usb_set_vbus() and omap_usb_start_srp() in the driver drivers/phy/ti/phy-omap-usb2.c of the USB device drivers for TI (Texas Instruments) operating system in Linux, which allow a hacker to cause a service failure.

The vulnerabilities of functions mapusbsetvbus and omapusbstartsrp in the driver drivers/phy/ti/phy-omap-usb2.c of the TI USB device driver for the Linux operating system are related to the assignment of a null pointer. Exploiting these vulnerabilities could allow a remote attacker to cause a...

The vulnerability of the VFIO PCI kernel driver of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the VFIO PCI kernel driver for the Linux operating system is related to errors in the calculation of pointers in the functions hisiaccvfresumewrite and hisiaccvfsaveread in the drivers/vfio/pci/hisilicon/hisiaccvfiopci.c module. Exploiting this vulnerability can allow a remot...

SWFTools Denial of Service Vulnerability (CNVD-2024-37468)

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A denial of service vulnerability exists in SWFTools version v0.9.2, which stems from an overlapping strcpy parameter in component /home/swftools/src/swfc+0x448318a. An attacker can exploit this vulnerability to cause a...

USN-6684-1 ncurses vulnerability

It was discovered that ncurses incorrectly handled certain function return values, possibly leading to segmentation fault. A local attacker could possibly use this to cause a denial of service system crash...

The vulnerability of the regmapdebugfs_exit() function in Linux operating systems allows a hacker to disclose sensitive information or cause system failures.

The vulnerability of the regmapdebugfsexit function in Linux operating systems is related to memory release errors. Exploiting this vulnerability can allow attackers to disclose sensitive information or cause service failures...

BIT-AIRFLOW-2023-22888 Apache Airflow: Scheduler remote DoS

Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to cause a service disruption by manipulating the runid parameter. This vulnerability is considered low since it requires an authenticated user to exploit it. It is recommended to upgrade to a version th...

The vulnerability of the sub_4110f4() function in D-Link DIR-823G router microprogramming software allows a hacker to induce a service failure.

The vulnerability of the sub4110f4 function in D-Link DIR-823G router microprogramming software is related to errors in pointer manipulation when processing URL addresses containing extensions .html, .asp, .php, or .Login. Exploiting this vulnerability can allow an attacker to cause service...

mysql: Server: Partition unspecified vulnerability (CPU Apr 2023)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Partition. Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

UBUNTU-CVE-2024-25269

libheif = 1.17.6 contains a memory leak in the function JpegEncoder::Encode. This flaw allows an attacker to cause a denial of service attack...

edk2: Buffer overflow in the DHCPv6 client via a long Server ID option

A security flaw was identified in EDK2, the open-source reference implementation of the UEFI specification, involving a buffer overflow vulnerability. This particular weakness enables an unauthorized attacker within the vicinity of the network to transmit a specifically crafted DHCPv6 message...

edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message

A security weakness was identified in EDK2, the open-source reference implementation of the UEFI specification, revealing a buffer overflow vulnerability. This vulnerability enables an unauthorized attacker within proximity on the network to transmit a specifically crafted DHCPv6 Advertise messag...

Vulnerability in the functions br_handle_frame_finish() and deliver_clone() of the networking component of the Linux operating system, allowing a hacker to trigger a service failure

The vulnerability of the network component of the Linux operating system’s kernel is related to incorrect synchronization when increasing counters in the functions brhandleframefinish and deliverclone in the net/bridge/brforward.c module. Exploiting this vulnerability can allow a remote attacker ...

The vulnerability of the kvm_for_each_vcpu() function in the KVM virtualization subsystem of Linux kernels allows a attacker to cause a service failure.

The vulnerability of the kvmforeachvcpu function in the KVM virtualization subsystem of Linux operating systems is related to errors in pointer manipulation when processing the createdvcpus parameter. Exploiting this vulnerability can allow a remote attacker to trigger a service failure...

The vulnerability of the sub_41D354() function in D-Link DIR-823G router’s software allows a hacker to execute arbitrary code or cause malfunctions during maintenance.

The vulnerability of the sub41D354 function in D-Link DIR-823G router’s microprogramming system is related to the issue where the operation’s output escapes the buffer in memory when processing the soapaction parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

The vulnerability of the memblock_free_late function in the ima component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the memblockfreelate function in the ima component of the Linux operating system’s kernel is related to the use of memory after it has been freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability in the /krb5/src/kdc/ndr.c component of the Kerberos network protocol implementation in the Debian GNU/Linux operating system, related to memory release errors, allows a attacker to cause a service failure.

The vulnerability in the /krb5/src/kdc/ndr.c component of the Kerberos network protocol implementation in the Debian GNU/Linux operating system is related to memory release errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...