1287 matches found
Google Pixel 安全漏洞
The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from a logical error that allows bypassing operator restrictions, potentially leading to an increase in local permissions...
EUVD-2026-10408
Pocket ID: OIDC authorization code validation uses AND instead of OR, allowing cross-client token exchange...
SmartGraphical: A Human-In-The-Loop Framework for Detecting Smart Contract Logical Vulnerabilities Via Pattern-Driven Static Analysis and Visual Abstraction
Smart contracts are fundamental components of blockchain ecosystems; however, their security remains a critical concern due to inherent vulnerabilities. While existing detection methodologies are predominantly syntax-oriented, targeting reentrancy and arithmetic errors, they often overlook logica...
NewStart CGSL MAIN 6.06 (SP) : lvm2 Vulnerability (NS-SA-2026-0010)
The remote NewStart CGSL host, running version MAIN 6.06 SP, has lvm2 packages installed that are affected by a vulnerability: - The cluster logical volume manager daemon clvmd in lvm2-cluster in LVM2 before 2.02.72, as used in Red Hat Global File System GFS and other products, does not verify...
The vulnerability of the md_bitmap_read_sb() function in the drivers/md/md-bitmap.c file of the driver module exposes it to being exploited by attackers, causing service interruptions for systems supporting multiple devices such as RAID and LVM in the Linux kernel.
The vulnerability of the mdbitmapreadsb function in the drivers/md/md-bitmap.c file of the Linux support module for multiple devices RAID and LVM involves an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
Vulnerability of the do_journal_discard() function in the drivers/md/bcache/journal.c module – A driver for supporting multiple device types (RAID and LVM) in the Linux kernel, which allows a hacker to trigger a service failure.
Vulnerability of the dojournaldiscard function in the drivers/md/bcache/journal.c module – The driver for supporting multiple devices RAID and LVM in the Linux kernel is vulnerable to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause...
Google Android 安全漏洞
Google Android is an open-source operating system based on Linux, developed by Google Inc. There are security vulnerabilities in Google Android, which stem from logical errors in several functions. These vulnerabilities could allow for the execution of arbitrary code and the escalation of local...
Google Android 安全漏洞
Google Android is an open-source operating system based on Linux, developed by Google Inc. There are security vulnerabilities in Google Android, which stem from logical errors in several functions. These vulnerabilities may lead to out-of-bound writes and local privilege escalation...
The vulnerability of the destroy() function in the drivers/md/dm-cache-target.c file of the Linux operating system’s device driver framework for multiple devices (such as RAID and LVM) allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the destroy function in the drivers/md/dm-cache-target.c file of the Linux kernel driver for multiple device drivers such as RAID and LVM is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the raid_message() function in the drivers/md/dm-raid.c module of the Linux kernel support for multiple device types (RAID and LVM) allows a hacker to cause a service failure.
The vulnerability of the raidmessage function in the drivers/md/dm-raid.c module of the Linux support for multiple device types RAID and LVM is related to the occurrence of mutual locking. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-23150
In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix memleak in nfcllcpsenduiframe. syzbot reported various memory leaks related to NFC, struct nfcllcpsock, skbuff, nfcdev, etc. 0 The leading log hinted that nfcllcpsenduiframe failed to allocate skb due to sockerrors...
The vulnerability of the btrackerdestroy() function in the drivers/md/dm-cache-background-tracker.c module of the Linux operating system’s device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the btrackerdestroy function in the drivers/md/dm-cache-background-tracker.c module of the Linux device driver for multiple devices such as RAID and LVM is related to a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker to compromise the...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, caused by a logical error, which may lead to buffer overflows...
The vulnerability of the mddev_unlock() function in the drivers/md/md.c module of the Linux operating system’s kernel, which allows a hacker to cause service failure.
The vulnerability of the mddevunlock function in the drivers/md/md.c module of the Linux device driver for multiple devices such as RAID and LVM is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the keycloak-services component of the Keycloak identity and access management software allows a perpetrator to elevate their privileges.
The vulnerability of the keycloak-services component of the identity and access management software relates to improper handling of logical operations. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
CVE-2025-71004
A segmentation violation in the oneflow.logicalor component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...
Bdtask Bhojon All-In-One Restaurant Management System has security vulnerabilities.
Bdtask Bhojon All-In-One Restaurant Management System is a restaurant management system developed by the Bangladeshi company Bdtask. The versions of the Bdtask Bhojon All-In-One Restaurant Management System prior to version 20260116 contained security vulnerabilities. These vulnerabilities were...
CVE-2025-71004
A segmentation violation in the oneflow.logicalor component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...
Uncaught Exception
Overview Affected versions of this package are vulnerable to Uncaught Exception via the oneflow.logicalor function. An attacker can cause the application to crash by submitting specially crafted input. Remediation There is no fixed version for oneflow. References - GitHub Issue Credit: Daisy2ang...
