hwmon: (asus-ec-sensors) check sensor index in read_string()

...

scsi: megaraid_sas: Fix invalid node index

...

ppp pppdump pppdump.c dumpppp array index

...

Student Attendance Management System Security Vulnerabilities

Student Attendance Management System is a student attendance management system developed by rickxy individual developer. A security vulnerability exists in Student Attendance Management System v1, which is caused by a SQL injection due to incorrect manipulation of the username parameter in the fi...

Linux Distros Unpatched Vulnerability : CVE-2023-52604

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree Syzkaller reported the following issue: UBSAN: array- index-out-of-bounds in fs/jfs/jfsdmap.c:2867:6 index...

Linux Distros Unpatched Vulnerability : CVE-2021-43389

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detachcapictr function in drivers/isdn/capi/kcapi....

Linux Distros Unpatched Vulnerability : CVE-2024-38552

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential index out of bounds in color transformation function Fixes...

VulnCheck KEV: CVE-2024-42852

Cross Site Scripting vulnerability in AcuToWeb server v.10.5.0.7577C8b allows a remote attacker to execute arbitrary code via the index.php component...

Linux Distros Unpatched Vulnerability : CVE-2021-47015

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bnxten: Fix RX consumer index logic in the error path. In bnxtrxpkt, the RX buffers are expected to complete in order. If the RX consumer index indicates an out...

NVIDIA Virtual GPU Manager Spoofing System Failure

The vulnerability of the NVIDIA Virtual GPU Manager driver relates to improper validation of the array index. Exploiting this vulnerability can allow an attacker to perform a spoofing attack or cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2022-50066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: atlantic: fix aqvec index out of range error The final update statement of the for loop exceeds the array range, the dereference of self-aqveci is not...

Linux Distros Unpatched Vulnerability : CVE-2023-52988

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: hda/via: Avoid potential array out-of-bound in addsecretdacpath sndhdagetconnections can return a negative error code. It may lead to accessing 'conn' arr...

Linux Distros Unpatched Vulnerability : CVE-2025-38380

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c/designware: Fix an initialization issue The i2cdwxferinit function requires msgs and msgwriteidx from the dev context to be initialized. amdi2cdwxferquirk...

Malicious code in tronapisync (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2768edf78749b023b104efcbfcfedd4d2633480e8d19ee433d467e1b39d2b9ce Package is prepared to exfiltrate private keys, most probably for Tron cryptocurrency. There is no other purpose of the package --- Category: MALICIOUS - The...

MAL-2025-41787 Malicious code in tronapisync (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2768edf78749b023b104efcbfcfedd4d2633480e8d19ee433d467e1b39d2b9ce Package is prepared to exfiltrate private keys, most probably for Tron cryptocurrency. There is no other purpose of the package --- Category: MALICIOUS - The...

Malicious code in httpsyncer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3e9323dbc11b949e9970ead2dcc1c5a7f05348a977591f8c86027ee220c86b62 Package is runs an Infostealer targeting telegram and Discord credentials. Depending on version, the infostealer is either downloaded from an URL or embedded i...

kernel: powerpc: Fix access beyond end of drmem array

A flaw was found in the Linux kernel, specifically affecting the PowerPC architecture's pseries memory hotplug functionality. The issue arises from the dlparmemoryremovebyindex function, which may access memory beyond the bounds of the drmem logical memory block LMB array when it fails to find a...

CVE-2025-27075 Improper Validation of Array Index in Bluetooth HOST

Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host...

CVE-2025-27075 Improper Validation of Array Index in Bluetooth HOST

Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host...

CVE-2025-27075

CVE-2025-27075 affects Bluetooth Host on Qualcomm chipsets and involves memory corruption when processing IOCTL commands with larger buffers. Root cause cited is improper handling/validation related to large IOCTL buffers (description aligns with an array/index validation issue). Impact per avail...