SUSE CVE-2025-21937

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Add check for mgmtallocskb in mgmtremotename Add check for the return value of mgmtallocskb in mgmtremotename to prevent null pointer dereference...

AZL-59915 CVE-2025-21937 affecting package kernel for versions less than 6.6.85.1-2

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Add check for mgmtallocskb in mgmtremotename Add check for the return value of mgmtallocskb in mgmtremotename to prevent null pointer dereference...

The vulnerability of the PROG_NAME() function in the kernel/bpf/core.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the PROGNAME function in the kernel/bpf/core.c module of the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...

DEBIAN-CVE-2024-57988

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btbcm: Fix NULL deref in btbcmgetboardname devmkstrdup can return a NULL pointer on failure,but this returned value in btbcmgetboardname is not checked. Add NULL check in btbcmgetboardname, to handle kernel NULL pointe...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from the Bluetooth: btbcm module not checking for null pointers in the btbcmgetboardname function...

The vulnerability of the uof_get_name() function in the QAT_4xxx driver (driver/crypto/intel/qat/qat_4xxx/adf_4xxx_hw_data.c) on Linux operating systems allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the uofgetname function in the QAT4xxx driver driver/crypto/intel/qat/qat4xxx/adf4xxxhwdata.c on Linux operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access t...

CVE-2024-53163 crypto: qat/qat_420xx - fix off by one in uof_get_name()

In the Linux kernel, the following vulnerability has been resolved: crypto: qat/qat420xx - fix off by one in uofgetname This is called from uofgetname420xx where "numobjs" is the ARRAYSIZE of fwobjs. The needs to be = to prevent an out of bounds access...

CVE-2023-43962: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Xunrui CMS Public Edition v.4.6.1 allows a remote attacker to execute arbitrary code via the project name function in the project settings tab...

SourceCodester School Log Management System 安全漏洞

SourceCodester School Log Management System is an open source school log management system from SourceCodester. A security vulnerability exists in SourceCodester School Log Management System version 1.0, which originates from a cross-site scripting vulnerability in the name function of the...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the use of uninitialized values in the copyname function, resulting in a kernel memory error...

AZL-31850 CVE-2023-38471 affecting package avahi for versions less than 0.8-3

A vulnerability was found in Avahi. A reachable assertion exists in the dbussethostname function...

CVE-2023-46504

Cross Site Scripting XSS vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a physically proximate attacker to execute arbitrary code via the library name function in the general settings component...

CVE-2023-46504

Cross Site Scripting XSS vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a physically proximate attacker to execute arbitrary code via the library name function in the general settings component...

YXBOOKCMS Cross-Site Scripting Vulnerability

YXBOOKCMS is a content management system by PwnCYN Individual Developers. A cross-site scripting vulnerability exists in PwnCYN YXBOOKCMS version v.1.0.2, which originates from a vulnerability that could allow a remote attacker to execute arbitrary code via the library name function in the genera...

CVE-2023-46504: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a physically proximate attacker to execute arbitrary code via the library name function in the general settings component...

PT-2023-30063 · Unknown · Pwncyn Yxbookcms

Name of the Vulnerable Software and Affected Versions: PwnCYN YXBOOKCMS version 1.0.2 Description: A Cross Site Scripting XSS issue allows an attacker to execute arbitrary code via the library name function in the general settings component. This can be exploited by a physically proximate attacke...

CVE-2023-46504

Cross Site Scripting XSS vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a physically proximate attacker to execute arbitrary code via the library name function in the general settings component...

The vulnerability of the SetAPLanSettings DeviceName() function in the microprogramming software of the D-Link DAP-1325 wireless signal booster allows a hacker to execute arbitrary code.

The vulnerability of the SetAPLanSettings DeviceName function in the microprogramming software of the D-Link DAP-1325 wireless signal amplifier is related to the execution of operations outside the buffer in memory when processing request parameters for endpoints. Exploiting this vulnerability...

Milesight UR32L 操作系统命令注入漏洞

The Milesight UR32L is a Lite industrial cellular router from Milesight. A command injection vulnerability exists in the Milesight UR32L zebra vlanname function, which can be exploited by an attacker to execute arbitrary commands on the system...

UBUNTU-CVE-2022-3551

A vulnerability, which was classified as problematic, has been found in X.org Server. Affected by this issue is the function ProcXkbGetKbdByName of the file xkb/xkb.c. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability...