2345 matches found
The vulnerabilities of the `ext4_mb_clear_bb()` and `ext4_free_blocks()` functions in the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerabilities of the ext4mbclearbb and ext4freeblocks functions in the Linux operating system’s kernel are related to initialization errors. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the `__ieee80211_scan_completed()` function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ieee80211scancompleted function in the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the iommu_mmio_write() function in the Linux operating system allows a hacker to gain unauthorized access to protected information.
The vulnerability of the iommummiowrite function in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
The vulnerability of thehdr_find_e() function in the Linux operating system allows a hacker to gain unauthorized access to protected information.
The vulnerability of thehdrfinde function in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
The vulnerability of the l2cap_connect_create_rsp() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the l2capconnectcreatersp function in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected informatio...
The vulnerability of the hfs_asc2mac() function in the Linux operating system allows a hacker to gain unauthorized access to protected information.
The vulnerability of the hfsasc2mac function in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
The vulnerability of the D-Link DSL-124 router’s microprogramming software lies in the lack of authentication for a critical function, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the D-Link DSL-124 router’s microprogramming software is related to the absence of authentication for critical functions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a POST request...
The vulnerability of the browser’s Background Fetch API programming interface in Google Chrome allows attackers to disclose protected information.
The vulnerability of the Google Chrome browser’s Background Fetch API programming interface is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a remote attacker to disclose sensitive information through a specially created HTM...
The vulnerability of the qemu-img utility of the Ironic Python Agent, which enables unauthorized access to protected information between the Ironic system and the physical hardware.
The vulnerability of the qemu-img utility of the Ironic Python Agent IPA relates to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
ROS-20260129-73-0047
Vulnerability in nextcloud related to authorization bypass through the use of a user-controlled key. Exploitation of the vulnerability could allow a remote attacker to gain unauthorized access to protected information...
The vulnerability of embedded Qualcomm microprogramming software, related to reading data beyond the buffer in memory, allows attackers to disclose protected information.
The vulnerability of embedded Qualcomm software lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information during the processing of the MBN file hash segment...
ROS-20260129-73-0013
A vulnerability in the OBEX protocol implementation of the Bluetooth protocol stack for Linux BlueZ is related to reading outside the valid range. Exploitation of the vulnerability could allow a remote attacker to gain access to protected information...
PT-2026-8220
Name of the Vulnerable Software and Affected Versions Grafana versions prior to 11.6.11, 12.0.9, 12.1.6, and 12.2.4 Description A cross-tenant isolation issue exists in the Correlations feature affecting legacy correlation records. A backward compatibility condition allows records where org id = ...
EUVD-2023-25645
Access of Memory Location After End of Buffer vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data...
ROS-20260128-73-0025
A vulnerability in the Linux operating system kernel is related to a pointer dereferencing bug. Exploitation of the vulnerability could allow an attacker acting remotely to affect the availability of protected information...
The vulnerability of the Core component in Oracle VM VirtualBox allows a hacker to gain access to, read, modify, or delete protected information.
The vulnerability of the Core component in Oracle VM VirtualBox is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to, read, modify, or delete protected information...
The vulnerability of the verify() and decrypt() functions in the npm OpenPGP library allows a perpetrator to obtain a valid message signature and disclose the protected information.
The vulnerability of the verify and decrypt functions in the npm OpenPGP library is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to obtain a valid signature for a message and disclose the protected information...
The vulnerability of the mask_secret() function in the Apache Airflow network programming environment allows a hacker to gain unauthorized access to protected information.
The vulnerability of the masksecret function in the Apache Airflow network programming environment is related to insufficient protection of operational data when processing template fields. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to...
The vulnerability of the http_auth.rs scenario in the distributed RustFS storage system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the httpauth.rs script in the distributed RustFS storage system is related to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Oracle Solaris operating system’s kernel allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Oracle Solaris operating system’s kernel is related to insufficient protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the TCP protocol...