125 matches found
The vulnerability of Cisco IOS XE operating systems, related to insufficient control over resources during their existence, allows attackers to compromise the accessibility of protected information.
The vulnerability of Cisco IOS XE operating systems is related to insufficient control over resources during their existence. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of protected information...
The vulnerability of the handshake_req_submit() function in the net/handshake/request.c module of the Linux operating system allows a hacker to gain access to protected information.
The vulnerability of the handshakereqsubmit function in the net/handshake/request.c module of the Linux operating system is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability can allow an attacker to gain access to protected information...
ROS-20260609-73-0004
The vulnerability of the RDP client FreeRDP is related to the escape of operations beyond the buffer in memory due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
The vulnerability of the `tunnel.allowNgrokFreeTierLoopbackBypass` parameter. This vulnerability is exploited by an AI agent named OpenClaw (previously known as ClawdBot or MoltBot), allowing attackers to compromise the integrity and accessibility of protected information.
The vulnerability of the tunnel.allowNgrokFreeTierLoopbackBypass parameter is related to the AI agent OpenClaw previously ClawdBot or MoltBot. This vulnerability stems from the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker operating remotely to...
The vulnerability of the decode_utf8 function in the base/gp_utf8.c software component, which is used for processing, transforming, and generating Ghostscript documents, allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the decodeutf8 function in the base/gputf8.c software component for processing and generating Ghostscript documents is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow an attacker to gain unauthorized acces...
The vulnerability of the sk_stream_kill_queues() function in the Linux operating system allows a hacker to compromise the accessibility of protected information.
The vulnerability of the skstreamkillqueues function in the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...
The vulnerability of the DCB_ATTR_BCN() function in Linux operating system kernels allows a attacker to compromise the accessibility of protected information.
The vulnerability of the DCBATTRBCN function in Linux operating systems is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...
The vulnerability of Honeywell CCTV surveillance camera software lies in the lack of authentication for critical functions, allowing intruders to gain unauthorized access to protected information.
The vulnerability of Honeywell CCTV video surveillance software lies in the lack of authentication for critical functions. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...
The vulnerability of the telnetd server of the inetutils network programming package allows a hacker to gain unauthorized access to protected information.
The vulnerability of the telnetd server of the inetutils network programming package is related to the lack of validation during the processing of incoming requests. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the RDP client FreeRDP, related to reading beyond the buffer in memory, allows attackers to compromise the confidentiality and accessibility of protected information.
The vulnerability of the RDP client FreeRDP relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of protected information...
ROS-20260120-7328
A vulnerability in the amdgetmmconfigrange function of the arch/x86/kernel/amdnb.c module of the Linux kernel is related to access differentiation flaws. Exploitation of the vulnerability may allow an intruder to gain unauthorized access to protected information...
The vulnerability of the Idle function in the PackageKit package manager allows a hacker to compromise the accessibility of protected information.
The vulnerability of the Idle function in the PackageKit package manager is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...
CVE-2019-18890
A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query...
The vulnerability of the drm/xe/guc component in the Linux operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the drm/xe/guc component in the Linux operating system is related to improper checking or processing of exceptional states. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the Go programming language, related to insufficient validation of input data, allows attackers to compromise the accessibility of protected information.
The vulnerability of the Go programming language is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the accessibility of protected information...
Vulnerability of the its_vpe_irq_domain_alloc() function in the drivers/irqchip/irq-gic-v3-its.c module – This driver for Linux’s IRQ chips allows a hacker to gain access to protected information.
Vulnerability of the itsvpeirqdomainalloc function in the drivers/irqchip/irq-gic-v3-its.c module – The Linux kernel’s IRQ chip support driver is vulnerable to a single-shift error. Exploiting this vulnerability could allow an attacker to access protected information...
Vulnerability of the venus_probe() function in the drivers/media/platform/qcom/venus/core.c module – A driver for supporting multimedia devices in the Linux operating system, which allows an attacker to gain access to protected information.
Vulnerability of the venusprobe function in the drivers/media/platform/qcom/venus/core.c module – The Linux kernel’s multimedia device support driver has vulnerabilities related to security configuration errors. Exploiting this vulnerability could allow an attacker to access protected information...
The vulnerability of the check_helper_mem_access() function in the kernel/bpf/verifier.c module of the Linux operating system allows a attacker to compromise the integrity and accessibility of the protected information.
The vulnerability of the checkhelpermemaccess function in the kernel/bpf/verifier.c module of the Linux operating system is related to errors in the code. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...
Vulnerability of the sun8i_ss_hash_run() function in the drivers/crypto/allwinner/sun8i-ss/sun8i-ss-hash.c module – a driver for the Linux kernel’s cryptographic accelerator, allowing an attacker to gain access to protected information
Vulnerability of the sun8isshashrun function in the drivers/crypto/allwinner/sun8i-ss/sun8i-ss-hash.c module – The driver for the Linux kernel’s cryptographic accelerator is vulnerable to a buffer overflow vulnerability before the last pointer is freed, resulting in a “memory leak”. Exploiting th...