Apache Superset <=1.3.2 - Default Login

Apache Superset through 1.3.2 contains a default login vulnerability via registered database connections for authenticated users. An attacker can obtain access to user accounts and thereby obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2021-44451 info:...

Google Chrome Microsoft Edge Data Compromise

The vulnerability in the FileSystem component of Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...

Google Chrome Microsoft Edge BFCache Data Compromise

The BFCache component vulnerability in Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...

Linux kernel qede_tpa_cont qede_tpa_end Component

The vulnerability in the qedetpacont and qedetpaend functions within the drivers/net/ethernet/qlogic/qede/qedefp.c file of the Linux kernel system is related to buffer overflow conditions. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality, integrit...

Linux kernel TSI721 DPC Buffer Overflow

The vulnerability of the tsi721dbdpc function in the drivers/rapidio/devices/tsi721.c component of the Linux kernel relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a remote attacker to compromise the integrity and accessibility of protected information...

Linux create_sdw_dailinks Heap Buffer Overflow

The vulnerability of the createsdwdailinks function in the sound/soc/amd/acp/acp-sdw-sof-mach.c component of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20261014-73-0011

The vulnerability of the loongsongpufixupdmahang function in the arch/loongarch/pci/pci.c module, which is part of the LoongArch architecture support for the Linux operating system, is related to a buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to compromi...

Netcore NR268 CGI User Ok Data Compromise

The vulnerability of the userok function in the CGI interface of Netcore NR268 microprogramming systems is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

ROS-20261014-73-0020

The vulnerability of the initamdzen2 function in the arch/x86/kernel/cpu/amd.c module, which is part of the Linux kernel support for x86 platforms, is related to insufficient spatial partitioning. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

ROS-20261013-73-0210

The vulnerability of the hciuartregisterdev function in the drivers/bluetooth/hcildisc.c device driver of the Linux operating system’s Bluetooth driver is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise...

Linux net/tipc/bearer ipvlan_hard_header Heap Buffer Overflow

The vulnerability of the ipvlanhardheader function in the net/tipc/bearer.c component of the Linux operating system is related to the pointer being dereferenced after its expiration. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

ROS-20261007-73-0097

The vulnerability of the as102usbprobe function in the drivers/media/usb/as102/as102usbdrv.c file of the Linux operating system’s multimedia device driver module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20261006-73-0325

The vulnerability of the tegraqspicombinedseqxfer function in the drivers/spi/spi-tegra210-quad.c file of the Linux operating system’s SPI device driver relates to the pointer assignment. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux fs/mnt_idmapping.c Heap Buffer Overflow DoS

The vulnerability of the statmountmntidmap function in the fs/mntidmapping.c component of the Linux operating system is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux kernel TCP Connection Request Buffer Overflow DoS

The vulnerability of the tcpconnrequest function in the include/net/tcp.h component of the Linux kernel is related to the predictability of random initial numbers for TCP sessions. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

ROS-20261006-73-0048

The vulnerability of the Linux operating system’s kernel security module, AppArmor, is related to coding errors. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

ROS-20260930-73-0124

The vulnerabilities of the functions qla2x00updateoptrom and qla2x00managehoststats in the drivers/scsi/qla2xxx/qlabsg.c module of the SCSI device driver for the Linux operating system are related to operations involving resources after their expiration. Exploiting these vulnerabilities could all...

Linux kernel hardware monitoring driver Heap Buffer Overflow DoS

The vulnerability in the pt5161lreadblockdata function within the drivers/hwmon/pt5161l.c file of the Linux kernel’s hardware monitoring driver involves buffer copying without checking the size of input data a classic buffer overflow condition. Exploitation of this vulnerability enables a remote...

Linux kernel multimedia device driver Heap Buffer Overflow DoS

The vulnerability in the vpum2mdevicerun function within the drivers/media/platform/amphion/vpuv4l2.c file of the Linux kernel multimedia driver is related to a race condition involving the signal handler. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality,...

Linux kernel mac80211 Stack Buffer Overflow DoS

The vulnerability in the ieee80211prepconnection function within the net/mac80211/mlme.c module of the Linux kernel’s mac80211 stack is related to dereferencing a pointer with an expired lifetime. Exploitation of this vulnerability may allow a remote attacker to compromise the confidentiality,...