27498 matches found
PT-2025-29165
Name of the Vulnerable Software and Affected Versions Tenda O3V2 version 1.0.0.123880 Description A critical issue exists in Tenda O3V2 version 1.0.0.123880. The fromNetToolGet function within the /goform/setPingInfo file of the httpd component is susceptible to operating system command injection...
The vulnerability of the ondemand.c component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the ondemand.c component in the Linux operating system is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the drivers/net/ethernet/mellanox/mlx5 kernel component of the Linux operating system, which allows a hacker to cause a service failure.
The vulnerability of the drivers/net/ethernet/mellanox/mlx5 kernel component of the Linux operating system is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the DRM/AMD/display components in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the DRM/amd/display components in the Linux operating system is related to the lack of zero-division checking. Exploiting this vulnerability can allow a perpetrator to cause service failures...
CVE-2025-38113
In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Fix NULL pointer dereference when nosmp is used With nosmp in cmdline, other CPUs are not brought up, leaving their cpcdescptr NULL. CPU0's iteration via foreachpossiblecpu dereferences these NULL pointers, causing...
CVE-2025-38098
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Don't treat wb connector as physical in createvalidatestreamforsink Don't try to operate on a drmwbconnector as an amdgpudmconnector. While dereferencing aconnector-base will "work" it's wrong and might lead to...
The vulnerability of the arch/x86 kernel component of the Linux operating system, which allows a hacker to gain access to confidential data
The vulnerability of the arch/x86 kernel component of the Linux operating system is related to the exposure of information through mismatches. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
The vulnerability of the ufs-qcom.c component in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the ufs-qcom.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the UFS driver in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the UFS driver in the Linux operating system is related to errors during thread locking. Exploiting this vulnerability can allow an attacker to cause a service failure...
Wire Swiss wire-ios 安全漏洞
Wire Swiss wire-ios is an iOS application from Wire Swiss open source. A security vulnerability exists in Wire Swiss wire-ios versions prior to 3.111.1 through 3.124.1, which originates from messages being logged in plaintext to the iOS system log, potentially leading to information disclosure...
The vulnerability of the megaraid_sas_base.c component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the megaraidsasbase.c component in the Linux operating system is related to insufficient blocking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the net/netfilter/xt_cluster.c component in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the net/netfilter/xtcluster.c component in the Linux operating system is related to buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the smc_core.c component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the smccore.c component in the Linux operating system is related to buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the fs/btrfs component in the Linux operating system, which allows a hacker to trigger a service failure
The vulnerability of the fs/btrfs component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the gf100.c component in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the gf100.c component in the Linux operating system is related to insufficient blocking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the drivers/regulator/rtq2208-regulator.c component in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the drivers/regulator/rtq2208-regulator.c component in the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...
CVE-2025-27022
The CVE-2025-27022 entry concerns Infinera G42 WebGUI HTTP endpoint in version R6.1.3 with a path traversal vulnerability. Root cause: lack of sufficient validation of user-supplied input enables authenticated users to access files readable by the httpd service user, potentially downloading OS fi...
CVE-2025-27021 Operating System Misconfiguration in Infinera G42
The misconfiguration in the sudoers configuration of the operating system in Infinera G42 version R6.1.3 allows low privileged OS users to read/write physical memory via devmem command line tool. This could allow sensitive information disclosure, denial of service, and privilege escalation by...
CVE-2025-27021 Operating System Misconfiguration in Infinera G42
The misconfiguration in the sudoers configuration of the operating system in Infinera G42 version R6.1.3 allows low privileged OS users to read/write physical memory via devmem command line tool. This could allow sensitive information disclosure, denial of service, and privilege escalation by...