1789 matches found
Microsoft ODBC Driver 安全漏洞
Microsoft ODBC Driver is a driver from Microsoft Corporation USA. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in Microsoft ODBC Driver. An attacker could exploit the vulnerability to...
CVE-2023-25493
The CVE-2023-25493 entry describes a vulnerability in the BIOS update tool driver affecting Lenovo Desktop, Smart Edge, Smart Office, and ThinkStation products that could let a local, privileged attacker execute arbitrary code. Affected component: BIOS update tool driver; root cause details are n...
CVE-2023-25493
A potential vulnerability was reported in the BIOS update tool driver for some Desktop, Smart Edge, Smart Office, and ThinkStation products that could allow a local user with elevated privileges to execute arbitrary code...
Huawei HarmonyOS Wearables 安全漏洞
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A memory misreference vulnerability exists in the...
CVE-2024-26748 usb: cdns3: fix memory double free when handle zero packet
In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: fix memory double free when handle zero packet 829 if request-complete 830 spinunlock&privdev-lock; 831 usbgadgetgivebackrequest&privep-endpoint, 832 request; 833 spinlock&privdev-lock; 834 835 836 if request-buf ==...
The vulnerability of the Windows Cloud Files Mini Filter Driver allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Windows Cloud Files Mini Filter Driver operating system is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the WDAC OLE DB driver for SQL Server on the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the WDAC OLE DB driver for SQL Server on the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the DCH-compatible Thunderbolt driver, related to access control deficiencies, allows a hacker to trigger a service failure.
The vulnerability of the DCH-compatible Thunderbolt driver is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the ODBC driver for Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the ODBC driver for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
kernel: nfp: use-after-free in area_cache_get()
A vulnerability was found in areacacheget in drivers/net/ethernet/netronome/nfp/nfpcore/nfpcppcore.c in the Netronome Flow Processor NFP driver in the Linux kernel. This flaw allows a manipulation that may lead to a use-after-free issue...
CVE-2023-52618 block/rnbd-srv: Check for unlikely string overflow
In the Linux kernel, the following vulnerability has been resolved: block/rnbd-srv: Check for unlikely string overflow Since "devsearchpath" can technically be as large as PATHMAX, there was a risk of truncation when copying it and a second string into "fullpath" since it was also PATHMAX sized...
kernel: nfp: use-after-free in area_cache_get()
A vulnerability was found in areacacheget in drivers/net/ethernet/netronome/nfp/nfpcore/nfpcppcore.c in the Netronome Flow Processor NFP driver in the Linux kernel. This flaw allows a manipulation that may lead to a use-after-free issue...
Remote code execution
Microsoft ODBC Driver Remote Code Execution Vulnerability...
CVE-2023-52495
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pmicglinkaltmode: fix port sanity check The PMIC GLINK altmode driver currently supports at most two ports. Fix the incomplete port sanity check on notifications to avoid accessing and corrupting memory beyond the port...
The vulnerabilities of functions map_usb_set_vbus() and omap_usb_start_srp() in the driver drivers/phy/ti/phy-omap-usb2.c of the USB device drivers for TI (Texas Instruments) operating system in Linux, which allow a hacker to cause a service failure.
The vulnerabilities of functions mapusbsetvbus and omapusbstartsrp in the driver drivers/phy/ti/phy-omap-usb2.c of the TI USB device driver for the Linux operating system are related to the assignment of a null pointer. Exploiting these vulnerabilities could allow a remote attacker to cause a...
The vulnerability of the v4l2_async_unregister_subdev() function in the drivers/media/v4l2-core/v4l2-async.c file of the Linux kernel’s video subsystem driver allows a attacker to compromise the integrity and accessibility of protected information.
The vulnerability of the v4l2asyncunregistersubdev function in the drivers/media/v4l2-core/v4l2-async.c file of the Linux kernel’s video subsystem driver is related to the reallocation of memory. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility o...
CVE-2024-1443
MSI Afterburner v4.6.5.16370 is vulnerable to a Denial of Service vulnerability by triggering the 0x80002000 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process...
kernel: memory leak in drivers/hid/hid-elo.c
A memory leak flaw was found in eloprobe in drivers/hid/hid-elo.c in the Human Interface Devices HID in the Linux kernel. This issue allows an attacker to cause a denial of service when hidparse in eloprobe fails...
The vulnerability of the ` binder_enqueue_thread_work_ilocked()` function in the `drivers/android/binder.c` module of the Linux operating system allows a attacker to trigger a service failure.
The vulnerability of the binderenqueuethreadworkilocked function in the drivers/android/binder.c module of the Linux operating system’s kernel is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the i2c_put_adapter() function in the Linux operating system’s I2C driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the i2cPutadapter function in the drivers/i2c/i2c-core-base.c file of the Linux I2C driver core relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...