11155 matches found
Sensitive Data Leakage
Snowflake drivers are vulnerable to Insertion of Sensitive Data Leakage. The vulnerability is due to sensitive data such as authentication tokens, encryption keys, pre-signed cloud-storage URLs, and SAML assertions being written to diagnostic logs, which allows an attacker with read access to the...
ROS-20261006-73-0433
The vulnerability of the startxmit function in the drivers/net/virtionet.c file of the Linux kernel network device driver involves the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
ROS-20261006-73-0381
The vulnerability of the drivers/spi/spi-tegra20-slink.c component in the Linux operating system is related to improper memory release before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261006-73-0366
The vulnerability of the acpiecsetup function in the drivers/acpi/ec.c file of the Linux ACPI configuration and power management extension driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
ROS-20261006-73-0315
The vulnerability in the drivers/pmdomain/imx/imx8m-blk-ctrl.c component of the Linux operating system is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261006-73-0232
The vulnerability in the drivers/isdn/mISDN/timerdev.c component of the Linux operating system is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...
ROS-20261006-73-0122
The vulnerability of the atmelsha204arngreadnonblocking function in the drivers/crypto/atmel-sha204a.c driver of the Linux kernel’s cryptographic accelerator module is related to unlimited resource allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
ROS-20261006-73-0024
The vulnerability of the icesetringparam function in the drivers/net/ethernet/intel/ice/iceethtool.c file of the Ethernet network adapter driver for the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this...
ROS-20261006-73-0005
The vulnerability of the kalmiabind function in the drivers/net/usb/kalmia.c module of the Linux USB network adapter driver module is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20261006-73-0218
The vulnerability in the driver component drivers/pmdomain/imx/imx8m-blk-ctrl.c of the Linux operating system is related to insufficient locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20261006-73-0208
The vulnerability of the mmppdmaresidue function in the drivers/dma/mmppdma.c file of the Linux kernel’s DMA driver relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
ROS-20261006-73-0325
The vulnerability of the tegraqspicombinedseqxfer function in the drivers/spi/spi-tegra210-quad.c file of the Linux operating system’s SPI device driver relates to the pointer assignment. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
ROS-20261006-73-0335
The vulnerability of the drivers/net/macvlan.c component in the Linux operating system’s kernel is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20261006-73-0377
The vulnerability of the drivers/platform/x86/toshibahaps.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261006-73-0251
The vulnerability of the ath10kcefreepipe and ath10kcefreepipe64 functions in the drivers/net/wireless/ath/ath10k/ce.c driver of the Atheros/Qualcomm wireless communication adapter driver for the Linux operating system is related to resource management errors. Exploiting this vulnerability can...
ROS-20261006-73-0116
The vulnerability of the drivers/spi/spi.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261006-73-0220
The vulnerability in the drivers/net/bonding/bondmain.c component of the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261006-73-0078
The vulnerability of the pmruntimereinit function in the drivers/base/power/runtime.c file of the Linux kernel’s device drivers module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...
NPM: Snowflake drivers writes sensitive information to logs
NPM: Snowflake drivers writes sensitive information to logs vulnerability discovered by ? in WordPress Npm snowflake-sdk versions 3.3.0...
