231584 matches found
Sql injection
SQL Injection vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email address parameter in the index.php component...
Null pointer dereference
In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Add pointer checks in qedfupdatelinkspeed The following trace was observed: 14.042059 Call Trace: 14.042061 14.042068 qedflinkupdate+0x144/0x1f0 qedf 14.042117 qedlinkupdate+0x5c/0x80 qed 14.042135...
Cross site scripting
Cross Site Scripting vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the image parameter in the profile.php component...
Spoofing
In the Linux kernel, the following vulnerability has been resolved: nvmet: fix memory leak in nvmetallocctrl When creating ctrl in nvmetallocctrl, if the cntlidmin is larger than cntlidmax of the subsystem, and jumps to the "outfreechangednslist" label, but the ctrl-sqs lack of be freed. Fix this...
Spoofing
In the Linux kernel, the following vulnerability has been resolved: habanalabs/gaudi: Fix a potential use after free in gaudimemsetdevicememory Our code analyzer reported a uaf. In gaudimemsetdevicememory, cb is get via hlcbkernelcreate with 2 refcount. If hlcsallocatejob failed, the execution ru...
Authorization
A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization...
Improper access control
Incorrect access control in Book Store Management System v1 allows attackers to access unauthorized pages and execute administrative functions without authenticating...
CVE-2024-1869
CVE-2024-1869 relates to HP DesignJet print products, where memory out-of-bounds access through the general-purpose gateway (GGW) on port 9220 can disclose information. Public sources confirm HP DesignJet is affected by an information-disclosure vulnerability via GGW, with remediation guidance to...
CVE-2021-47079
CVE-2021-47079: Linux kernel platform/x86 ideapad-laptop NULL pointer dereference in dytc_cql_command (third parameter must not be NULL). The vulnerability was resolved in upstream kernel as described; attack vector LOCAL with LOW complexity and HIGH impact on availability per NVD metrics. Connec...
CVE-2021-47077
CVE-2021-47077 affects the Linux kernel scsi qedf driver. The vulnerability stems from qedf_update_link_speed() dereferencing shost_data when it has not been initialised, causing a NULL pointer dereference and potentially an impact on availability. The fix adds a NULL pointer check before using s...
CVE-2021-47073
CVE-2021-47073 concerns a Linux kernel issue in platform/x86 dell-smbios-wmi where unregistering the driver occurred unconditionally, causing a kernel oops at module removal. The fix ensures unregister happens only under the same condition as registration (Dell WMI support). Affects the Dell WMI ...
CVE-2021-47071
CVE-2021-47071 in the Linux kernel affects the uio_hv_generic path. If vmbus_establish_gpadl() fails, the recv/gpadl paths are not updated, and the error-path free in hv_uio_cleanup() may not release the associated buffer, causing a memory leak. The description in the initial document confirms th...
CVE-2021-47070
CVE-2021-47070 is described in the connected docs as a Linux kernel vulnerability in the uio_hv_generic driver where memory allocated by vmbus_alloc_ring() during probe is leaked in error handling paths. The fix adds a missing vmbus_free_ring() call, noting that the memory is already freed in the...
Out-of-bounds
Industrial Control Systems Network Protocol Parsers ICSNPP - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write while analyzing specific Ethercat datagrams. This could allow an attacker to cause arbitrary code execution...
Design/Logic Flaw
A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the privileges of the application service account.The vulnerability is due to unsafe handling of file names. A local attacker could exploit this vulnerability by supplying a file nam...
Integer overflow
SpiceDB is an open source, Google Zanzibar-inspired database for creating and managing security-critical application permissions. Integer overflow in chunking helper causes dispatching to miss elements or panic. Any SpiceDB cluster with any schema where a resource being checked has more than 6553...
Improper access control
A remote attacker may be able to bypass access control of Commend WS203VICM by creating a malicious request...
Code injection
A weak encoding is used to transmit credentials for WS203VICM...
Design/Logic Flaw
Previous versions of HP ThinPro prior to HP ThinPro 8.0 SP 8 could potentially contain security vulnerabilities. HP has released HP ThinPro 8.0 SP 8, which includes updates to mitigate potential vulnerabilities...