PT-2021-25376

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.17 through 5.4.125 Description: A potential NULL dereference issue exists in the nfs get client function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2021-29430

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.17 through 5.10.43 Description A potential NULL dereference issue exists in the nfs get client function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 3.17...

PT-2024-11266 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential NULL dereference in the nfs get client function has been resolved. This issue could lead to an Oops, as none of the callers are expecting NULL returns from nfs get client. ...

D-Link DIR-823G Router Access Control Error Vulnerability

The D-Link DIR-823G is a wireless router from AUO D-Link of Taiwan, China. An access control error vulnerability exists in /bin/goahead in the D-Link DIR-823G using firmware version 1.02B03. The vulnerability can be exploited to obtain sensitive information e.g., MAC address about all clients in...

The vulnerability of the OpenSSL library, which allows a hacker to decrypt data

The vulnerability in the getclientmasterkey function of the s2srvr.c file, within the SSLv2 implementation using the OpenSSL library, is related to the improper operation of the protection mechanism against prediction attacks. This mechanism incorrectly re-saves the key data before exporting the...

The vulnerability of the get_client_master_key function in the SSLv2 implementation of the OpenSSL library allows a hacker to disclose sensitive information.

The vulnerability of the OpenSSL library, which allows a hacker to trigger a service failure...

Multiple SQL Injection Vulnerabilities in Dell Asset Manager

Dell Asset Manager is an asset management software. Dell Asset Manager GetClientPackage.aspx and GetProcessedPackage.aspx fail to properly handle WEB requests, allowing remote attackers to exploit vulnerabilities by submitting specially crafted SQL queries to manipulate or obtain database data...

PT-2014-1949

Name of the Vulnerable Software and Affected Versions OpenSSL versions 0.9.8zc through 1.0.1j Description The issue is related to the ssl23 get client hello function in s23 srvr.c of the OpenSSL library, which incorrectly handles outdated protocols. This can be exploited by a remote attacker to...

PT-2014-1702

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 1.0.1j Gentoo Linux affected versions not specified Description The issue allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a clien...