15766 matches found
CVE-2023-33481
RemoteClinic 2.0 is vulnerable to a time-based blind SQL injection attack in the 'start' GET parameter of patients/index.php...
kernel: mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak
In the Linux kernel, the following vulnerability has been resolved: mfd: arizona: Use pmruntimeresumeandget to prevent refcnt leak In arizonaclk32kenable, we should use pmruntimeresumeandget as pmruntimegetsync will increase the refcnt even when it returns an error...
kernel: ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
A vulnerability was found in the Linux kernel's ALSA subsystem in the addsecretdacpath function, where improper array handling can lead to out-of-bounds access. This occurs if the return value of the call to sndhdagetconnections returns an error code a negative number, which is stored in the...
kernel: regulator: of: Fix refcount leak bug in of_get_regulation_constraints()
In the Linux kernel, the following vulnerability has been resolved: regulator: of: Fix refcount leak bug in ofgetregulationconstraints We should call the ofnodeput for the reference returned by ofgetchildbyname which has increased the refcount...
kernel: thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
A null pointer dereference flaw was found in the Linux kernel thermal/intelpowerclamp driver. When CPU 0 is offline and the intelpowerclamp driver attempts to inject idle cycles, the code incorrectly calls smpprocessorid preemptively, which triggers a kernel BUG. This occurs because the function...
kernel: mm/swap: fix swap_info_struct race between swapoff and get_swap_pages()
In the Linux kernel, the following vulnerability has been resolved: mm/swap: fix swapinfostruct race between swapoff and getswappages The si-lock must be held when deleting the si from the available list. Otherwise, another thread can re-add the si to the available list, which can lead to memory...
kernel: mt76: mt7915: Fix PCI device refcount leak in mt7915_pci_init_hif2()
In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: Fix PCI device refcount leak in mt7915pciinithif2 As comment of pcigetdevice says, it returns a pcidevice with its refcount increased. We need to call pcidevput to decrease the refcount. Save the return value of...
CVE-2023-42537
An improper input validation in getheadcrc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write...
SAMSUNG Mobile devices buffer error vulnerability
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A buffer error vulnerability exists in SAMSUNG Mobile devices prior to SMR Nov-2023 Release 1, which stems from incorrect input validation in the...
CVE-2023-33481
RemoteClinic 2.0 is vulnerable to a time-based blind SQL injection attack in the 'start' GET parameter of patients/index.php...
PT-2025-41121
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified and addressed in the i915 selftests within the Linux kernel’s drm/i915 subsystem. The issue occurred during error handling within the fake get pages function...
PT-2023-6964 · Unknown +2 · Gpac Mp4Box +2
Name of the Vulnerable Software and Affected Versions: gpac MP4Box version 2.3-DEV-rev573-g201320819-master Description: The issue is caused by a buffer overflow in the gf isom get user data function, which can be exploited by a local attacker to cause a denial of service. This buffer overflow...
PT-2025-37562
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference issue was identified and resolved in the Linux kernel's raw get next function. This issue stemmed from parallel execution sequences potentially freeing a socket while...
CVE-2023-33481
RemoteClinic 2.0 is vulnerable to a time-based blind SQL injection attack in the 'start' GET parameter of patients/index.php...
WPB Show Core <= 2.2 - Unauthenticated Server Side Request Forgery
Description This plugin is vulnerable to server-side request forgery SSRF via the path parameter. PoC Send a GET request to wpb-show-core/download-file.php with the path parameter set to an arbitrary URL http://example.com/latest/meta-data/iam/security-credentials/wpb-apps-prod-role the website...
Remote file inclusion
A local file inclusion vulnerability has been found in WPN-XM Serverstack affecting version 0.8.6, which would allow an unauthenticated user to perform a local file inclusion LFI via the /tools/webinterface/index.php?page parameter by sending a GET request. This vulnerability could lead to the...
PT-2023-9036
Name of the Vulnerable Software and Affected Versions webOS versions 4 through 7 Description A command injection vulnerability exists in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service. This vulnerability can be triggered by a series of specially crafted...
get-inspiration.de Improper Access Control vulnerability OBB-3770476
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
SUSE CVE-2015-1827
The getusergrouplist function in the extdom plug-in in FreeIPA before 4.1.4 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service crash via a group list request for a user that belongs to a large number of groups...
SUSE CVE-2019-10221
A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from the pki-core server. This flaw is caused by missing sanitization of the GET URL parameters. An attacker could abuse this flaw to trick an authenticated user into clicking a...