8 matches found
EUVD-2026-39294
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add buffer overflow check in MS getinfoioctl Add validation that the info size returned from the metric stream info query is not exceeded when checked against the allocated buffer size. If the firmware returns a size...
CVE-2026-8360 Gladinet Triofox Unchecked Return Value to NULL Pointer Dereference DOS
Function calls to WOSCommonUtil.dll!WOSSysInfoGetDeviceInterface in various DLLs i.e., WOSProfileMgrModule.dll, WOSWebDavModule.dll can return a NULL pointer i.e., when no user is logged into the Triofox Server Agent Management Console. The returned NULL pointer is not checked before being...
CVE-2026-2667
Rongzhitong Visual Integrated Command and Dispatch Platform is affected. The vulnerability targets an unknown function in the file /dispatch/api?cmd=userinfo, leading to improper access controls. The issue is exploitable remotely and an exploit has been disclosed publicly. The vendor was contacte...
EUVD-2022-39838
Malicious code in bioql PyPI...
driver: iio: add missing checks on iio_info's callback access
...
Sensitive Information Disclosure
Mattermost is vulnerable to Sensitive Information Disclosure. The vulnerability is due to improper authorization due to failing to properly verify a user's permissions when accessing group information via API requests...
CVE-2022-37185
SQL injection vulnerability exists in the school information query interface repschoolproj.php of the EMS 6.2 system of the Office of the Thai Basic Education Commission, which can lead to data leakage...
The vulnerability of the Shibboleth authentication technology lies in the false representation of critical information to the user interface, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the Shibboleth authentication technology is related to the false representation of critical information to the user interface. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...