426 matches found
SUSE CVE-2013-5634
arch/arm/kvm/arm.c in the Linux kernel before 3.10 on the ARM platform, when KVM is used, allows host OS users to cause a denial of service NULL pointer dereference, OOPS, and host OS crash or possibly have unspecified other impact by omitting vCPU initialization before a KVMGETREGLIST ioctl call...
SUSE CVE-2016-4439
The espregwrite function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller FSC support in QEMU does not properly check command buffer length, which allows local guest OS administrators to cause a denial of service out-of-bounds write and QEMU process crash or potentially execute arbitrary code o...
SUSE CVE-2018-18021
arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVMSETONREG ioctl. This is exploitable by attackers who can create virtual machines. An attacker can arbitrarily redirect the hypervisor flow of control with full register control. An attacker ca...
SUSE CVE-2019-6457
An issue was discovered in GNU Recutils 1.8. There is a memory leak in recaggregateregnew in rec-aggregate.c in librec.a...
SUSE CVE-2020-12659
An issue was discovered in the Linux kernel before 5.6.7. xdpumemreg in net/xdp/xdpumem.c has an out-of-bounds write by a user with the CAPNETADMIN capability because of a lack of headroom validation...
GSD-2023-1001379 i2c: mux: reg: check return value after calling platform_get_resource()
i2c: mux: reg: check return value after calling platformgetresource This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...
GSD-2023-1000650 i2c: mux: reg: check return value after calling platform_get_resource()
i2c: mux: reg: check return value after calling platformgetresource This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...
PT-2023-34563
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to a use-after-free in the ath9k hif usb reg in cb function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...
PT-2023-34141
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to the i2c mux reg check, where the return value after calling platform get resource is not properly checked. This is an automated ID intended to aid in discovery of...
PT-2023-33727
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to the i2c mux reg check, where the return value after calling platform get resource is not properly checked. This is an automated ID intended to aid in discovery of...
PT-2022-6832 · Ce805M · Ce805M
Name of the Vulnerable Software and Affected Versions: CE805M affected versions not specified Description: The issue is related to the incorrect management of code generation in the CMD W REG command handler of the CE A protocol implementation in the CE805M data collection and transmission device...
PT-2022-36342
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.20 through 5.10.154 Description The issue is related to a wrong reg type conversion in the release reference function. It was introduced in version v4.20 and fixed in version v5.10.155. The actual impact and attack...
MKCMS SQL注入漏洞
MKCMS is a content management system. A SQL injection vulnerability exists in MKCMS version V6.2, which originates from the name parameter of its /ucenter/reg.php component that allows an attacker to achieve SQL injection...
PT-2022-8648 · Mkcms · Mkcms
Name of the Vulnerable Software and Affected Versions: MKCMS version 6.2 Description: The issue is related to SQL injection. It occurs via the /ucenter/reg.php API endpoint, specifically through the name parameter. Recommendations: For MKCMS version 6.2, as a temporary workaround, consider...
CVE-2022-39876
Insertion of Sensitive Information into Log in PushRegIdUpdateClient of SReminder prior to 8.2.01.13 allows attacker to access device IMEI...
reg-tech.ru Cross Site Scripting vulnerability OBB-2935611
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Fedora: Security Advisory for reg (FEDORA-2022-3969b64d4b)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
The vulnerability of the cmdline_insert_reg() function in the Vim text editor allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the cmdlineinsertreg function exgetln.c in the Vim text editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
PT-2025-8591
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to insufficient bounds propagation in the Linux kernel's bpf Berkeley Packet Filter functionality. Specifically, it concerns the adjust scalar min max vals function,...
PT-2022-3448
Name of the Vulnerable Software and Affected Versions vim versions prior to 8.2 Description The issue is related to a buffer over-read in the vim text editor. It is associated with the cmdline insert reg function in ex getln.c. Exploitation of this issue may allow a remote attacker to impact the...