51973 matches found
The vulnerabilities of the functions vhost_scsi_set_endpoint() and vhost_scsi_clear_endpoint() in the drivers/vhost/scsi.c module of the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerabilities of the functions vhostscsisetendpoint and vhostscsiclearendpoint in the drivers/vhost/scsi.c module of the Linux kernel are related to the repeated use of previously freed memory. Exploiting these vulnerabilities could allow an attacker to compromise the confidentiality,...
The vulnerability of the console-based graphic editor ImageMagick, related to buffer overflow in dynamic memory, allows attackers to compromise the integrity and accessibility of the protected information.
The vulnerability of the console-based graphic editor ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to compromise the integrity and accessibility of the protected information...
The vulnerability of the nft_tproxy_dump() function in the net/netfilter/nft_tproxy.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the nfttproxydump function in the net/netfilter/nfttproxy.c module of the netfilter component of the Linux operating system is related to the use of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the `cdns3_wa2_remove_old_request()` function in the `drivers/usb/cdns3/cdns3-gadget.c` driver for USB device drivers in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the cdns3wa2removeoldrequest function in the drivers/usb/cdns3/cdns3-gadget.c device driver of the Linux operating system’s USB device driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability in the virtualization subsystem’s arch/x86/kvm/mmu.c module on the Linux operating system’s x86 kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability in the arch/x86/kvm/mmu.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...
The vulnerability of Moxa industrial computers lies in the transmission of critical information in plaintext, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of Moxa industrial computers lies in the transmission of critical information in plaintext. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...
ROS-20260306-73-0014
A vulnerability in the seg6 component of the Linux kernel is related to access to an uninitialized pointer. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...
CVE-2026-23808
A vulnerability has been identified in a standardized wireless roaming protocol that could enable a malicious actor to install an attacker-controlled Group Temporal Key GTK on a client device. Successful exploitation of this vulnerability could allow a remote malicious actor to perform unauthoriz...
EUVD-2026-9820
Avira Internet Security contains an improper link resolution vulnerability in the Software Updater component. During the update process, a privileged service running as SYSTEM deletes a file under C:\ProgramData without validating whether the path resolves through a symbolic link or reparse point...
EUVD-2026-9822
Avira Internet Security contains a time-of-check time-of-use TOCTOU vulnerability in the Optimizer component. A privileged service running as SYSTEM identifies directories for cleanup during a scan phase and subsequently deletes them during a separate cleanup phase without revalidating the target...
CVE-2026-27750
Avira Internet Security contains a time-of-check time-of-use TOCTOU vulnerability in the Optimizer component. A privileged service running as SYSTEM identifies directories for cleanup during a scan phase and subsequently deletes them during a separate cleanup phase without revalidating the target...
CVE-2026-27750
Avira Internet Security contains a time-of-check time-of-use TOCTOU vulnerability in the Optimizer component. A privileged service running as SYSTEM identifies directories for cleanup during a scan phase and subsequently deletes them during a separate cleanup phase without revalidating the target...
CVE-2026-27748
Avira Internet Security contains an improper link resolution vulnerability in the Software Updater component. During the update process, a privileged service running as SYSTEM deletes a file under C:\ProgramData without validating whether the path resolves through a symbolic link or reparse point...
CVE-2026-27748
Avira Internet Security contains an improper link resolution vulnerability in the Software Updater component. During the update process, a privileged service running as SYSTEM deletes a file under C:\ProgramData without validating whether the path resolves through a symbolic link or reparse point...
CVE-2026-27748 Avira Internet Security Arbitrary File Deletion via Improper Link Resolution
Avira Internet Security contains an improper link resolution vulnerability in the Software Updater component. During the update process, a privileged service running as SYSTEM deletes a file under C:\ProgramData without validating whether the path resolves through a symbolic link or reparse point...
CVE-2026-27750
Avira Internet Security is affected by a TOCTOU vulnerability in the Optimizer component. A privileged service running as SYSTEM identifies directories for cleanup during a scan phase and later deletes them in a separate cleanup phase without revalidating the target path. An local attacker could ...
CVE-2026-27750
Avira Internet Security contains a time-of-check time-of-use TOCTOU vulnerability in the Optimizer component. A privileged service running as SYSTEM identifies directories for cleanup during a scan phase and subsequently deletes them during a separate cleanup phase without revalidating the target...
CVE-2026-27750 Avira Internet Security Optimizer TOCTOU
Avira Internet Security contains a time-of-check time-of-use TOCTOU vulnerability in the Optimizer component. A privileged service running as SYSTEM identifies directories for cleanup during a scan phase and subsequently deletes them during a separate cleanup phase without revalidating the target...
CVE-2026-27750 Avira Internet Security Optimizer TOCTOU
Avira Internet Security contains a time-of-check time-of-use TOCTOU vulnerability in the Optimizer component. A privileged service running as SYSTEM identifies directories for cleanup during a scan phase and subsequently deletes them during a separate cleanup phase without revalidating the target...