CVE-2024-35388

TOTOLINK NR1800X v9.1.0u.6681_B20230703 contains a stack overflow in the urldecode function triggered via the password parameter. Multiple sources (NVD/CNVD/Red Hat/CVE entries) describe the vulnerability as arising from insufficient input length validation, enabling arbitrary code execution or a...

CVE-2023-46442

CVE-2023-46442 affects the Soot framework (Java 8) where an infinite loop in retrieveActiveBody can cause DoS. Public details confirm vulnerable versions prior to 4.4.1 and an exploit/POC exists demonstrating resource exhaustion. Remediation per sources is to upgrade to Soot 4.4.1 or later; as a ...

CVE-2024-34995

svnWebUI v1.8.3 was discovered to contain an arbitrary file deletion vulnerability via the dirTemps parameter under com.cym.controller.UserControllerimportOver. This vulnerability allows attackers to delete arbitrary files via a crafted POST request...

CVE-2024-33809

PingCAP TiDB v7.5.1 was discovered to contain a buffer overflow vulnerability, which could lead to database crashes and denial of service attacks...

CVE-2024-35618

PingCAP TiDB v7.5.1 was discovered to contain a NULL pointer dereference via the component SortedRowContainer...

CVE-2024-31510

An issue in Open Quantum Safe liboqs v.10.0 allows a remote attacker to escalate privileges via the cryptosignsignature parameter in the /pqcrystals-dilithium-standardml-dsa-44-ipdavx2/sign.c component...

CVE-2024-22588

Kwik commit 745fd4e2 does not discard unused encryption keys...

CVE-2021-47561

In the Linux kernel, the following vulnerability has been resolved: i2c: virtio: disable timeout handling If a timeout is hit, it can result is incorrect data on the I2C bus and/or memory corruptions in the guest since the device can still be operating on the buffers it was given while the guest...

CVE-2021-47519

In the Linux kernel, the following vulnerability has been resolved: can: mcan: mcanreadfifo: fix memory leak in error branch In mcanreadfifo, if the second call to mcanfiforead fails, the function jump to the outfail label and returns without calling mcanreceiveskb. This means that the skb...

CVE-2021-47504

In the Linux kernel, the following vulnerability has been resolved: iouring: ensure taskwork gets run as part of cancelations If we successfully cancel a work item but that work item needs to be processed through taskwork, then we can be sleeping uninterruptibly in iouringcancelgeneric and never...

CVE-2021-47570

CVE-2021-47570 is addressed in the Linux kernel staging area (rt8188eu driver). The issue was a memory leak in rtw_wx_read32() where ptmp was not freed before returning -EINVAL. A fix (memory cleanup) has been applied to resolve this vulnerability; references point to kernel stable commits that i...

CVE-2021-47568

CVE-2021-47568 concerns the ksmbd module in the Linux kernel, where a memory leak in get_file_stream_info() (fs/ksmbd/smb2pdu.c) could lead to resource exhaustion and a denial-of-service risk. The issue is resolved in the provided documents by applying a fix for the memleak; exploitation details ...

CVE-2021-47567

CVE-2021-47567 describes a Linux kernel vulnerability in the powerpc/32 code where a vmap stack overflow could lead to a hard lockup when the data MMU is not active. The root cause is that emergency_ctx was accessed with a virtual address during MMU inactivity; the fix uses a physical address ins...

CVE-2021-47561

CVE-2021-47561 affects the Linux kernel i2c virtio driver. The issue arises when a timeout occurs: the device can continue operating on buffers the guest has freed, risking data corruption on the I2C bus and potential memory corruption inside the guest. The root cause is improper timeout handling...

CVE-2021-47556

CVE-2021-47556 concerns a NULL-deref in ethtool_set_coalesce() on the legacy ioctl path when a device driver implements only one of get_coalesce() or set_coalesce() and the availability check is buggy. The issue could crash with a NULL pointer when changing coalescing settings if both callbacks a...

CVE-2021-47547

CVE-2021-47547 is a Linux kernel vulnerability in the tulip de4x5 driver. The fix prevents an out-of-bounds access of the array lp->phy[8] when the loop ends with k==8, which could occur if all ids in lp->phy[8] are non-zero. The connected Astra Linux bulletin mirrors this kernel issue and ...

CVE-2021-47543

CVE-2021-47543 entry is rejected/not used; not an active vulnerability entry.

CVE-2021-47539

CVE-2021-47539 affects the Linux kernel RxRPC code. The issue is a use-after-free-like leak where a rxrpc_peer may be leaked during rxrpc_look_up_bundle() when handling a bundle candidate. The provided data states the root cause is a leak of the rxrpc_peer and the remediation is to call rxrpc_put...

CVE-2021-47532

CVE-2021-47532 concerns a leak in the Linux kernel related to the DRM MSM devfreq OPP reference counter. The vulnerability is described as a local issue in the kernel’s OPP handling that could leak references in the OPP (Operating Performance Point) management path within the drm/msm/devfreq subs...

CVE-2021-47526

CVE-2021-47526 is a Linux kernel vulnerability in the serial: liteuart driver causing a NULL pointer dereference in _remove() when drvdata isn’t set in _probe(). The root cause is missing drvdata assignment which leads to platform_get_drvdata() returning NULL in _remove(). The issue affects the L...