ROS-20260918-73-0025

The vulnerability of the ip6errgenicmpv6unreach function in the net/ipv6/icmp.c module of the Linux operating system is related to access to resources through incompatible types. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause...

ROS-20260918-73-0004

The vulnerability of the getsregs2 function in the arch/x86/kvm/x86.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the...

ROS-20260918-73-0090

The vulnerability of the mtkxdpsetup function in the drivers/net/ethernet/mediatek/mtkethsoc.c file of the network adapter driver for mediatek in the Linux operating system is related to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability could...

ROS-20260918-73-0026

The vulnerability of the wacomintuosbtirq function in the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260918-73-0027

The vulnerability of the sockdef-readable function in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the dns.Msg.Unpack() function in the plugin/pkg/doh/doh.go, core/dnsserver/server_quic.go, and core/dnsserver/server_grpc.go files of the coredns server allows a attacker to cause a service failure.

The vulnerability of the dns.Msg.Unpack function in the plugin/pkg/doh/doh.go, core/dnsserver/serverquic.go, and core/dnsserver/servergrpc.go files of the coredns server is related to unlimited resource distribution. Exploiting this vulnerability could allow a malicious actor to cause service...

The vulnerability of the formWifiMacFilterSet() function in the Tenda W3 wireless access point software allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formWifiMacFilterSet function in the Tenda W3 wireless access point software lies in the fact that the operation’s results are stored outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the formexeCommand() function in the Tenda W3 wireless access point software allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formexeCommand function in the Tenda W3 wireless access point software lies in the fact that the operation exceeds the buffer limits in memory when processing the cmdinput parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality,...

The vulnerability of the fromNatlimit() function in Tenda F453 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the fromNatlimit function in Tenda F453 router microprogramming software is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the formWrlExtraSet(/goform/WrlExtraSet) function in the Tenda FH1201 router software allows a attacker to execute arbitrary code or cause service interruptions.

The vulnerability of the formWrlExtraSet/goform/WrlExtraSet function in the Tenda FH1201 router microprogramming system lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...

The vulnerability of the fromGstDhcpSetSer() function (/goform/GstDhcpSetSer) in the httpd microprogramming system for Tenda F451 components allows a attacker to cause a service failure.

The vulnerability of the fromGstDhcpSetSer function /goform/GstDhcpSetSer in the httpd microprogramming system for Tenda F451 components is related to the issue of the operation going beyond the buffer in memory when processing the dips parameter. Exploiting this vulnerability could allow an...

The vulnerability of the fromSafeClientFilter() function (/goform/SafeClientFilter) in the httpd microprogramming system for Tenda F451 components allows a attacker to cause a service failure.

The vulnerability of the fromSafeClientFilter function /goform/SafeClientFilter in the httpd microprogramming system for Tenda F451 routers is related to the issue of the operation going beyond the buffer in memory when processing the manufacturer/Go parameter. Exploiting this vulnerability could...

The vulnerability of the websGetVar() function in the microprogramming software for Tenda AC15 allows a hacker to execute arbitrary code.

The vulnerability of the websGetVar function in the Tenda AC15 router’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the set_device_name() function in Tenda A21 router microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the setdevicename function in Tenda A21 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service failures...

The vulnerability of the strcpy() function in Tenda A18 router software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the strcpy function in Tenda A18 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service failures...

The vulnerability of the fromexeCommand() function in the Tenda F456 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromexeCommand function in the Tenda F456 router’s microprogramming system is related to the execution of an operation outside the buffer in memory when processing the cmdinput parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or...

The vulnerability of the unserialize() function in the SessionMaker CMS system, October CMS, allows a hacker to execute arbitrary code.

The vulnerability of the unserialize function in the SessionMaker CMS system, October CMS, is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the mp_SetEnddisc() function in the operating system kernel of FreeBSD allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the mpSetEnddisc function in the kernel of FreeBSD is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a system failure or execute arbitrary code...

The vulnerability of the LcpDecodeConfig() function in the operating system kernel of FreeBSD allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the LcpDecodeConfig function in the kernel of the FreeBSD operating system is related to improper handling of discrepancies in parameter length. Exploiting this vulnerability can allow a remote attacker to cause service failures or execute arbitrary code...

The vulnerability of the dns.Msg.Unpack() function in the plugin/pkg/doh/doh.go, core/dnsserver/server_quic.go, and core/dnsserver/server_grpc.go files of the coredns server allows a attacker to compromise the integrity of the protected information.

The vulnerability of the dns.Msg.Unpack function in the plugin/pkg/doh/doh.go, core/dnsserver/serverquic.go, and core/dnsserver/servergrpc.go files of the coredns server is related to the ability to bypass access control mechanisms. Exploiting this vulnerability allows a malicious actor to...