6 matches found
The vulnerabilities of the functions `btrfs.markbg.unused()` and `btrfs.create.pending.block.groups()` in the `fs/btrfs/block-group.c` file of the Linux kernel’s file system allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerabilities of the functions btrfs.markbg.unused and btrfs.create.pending.block.groups in the fs/btrfs/block-group.c file of the Linux kernel’s file system are related to the reallocation of previously freed memory due to errors in link counters during updates. Exploiting these...
EUVD-2026-37824
vantage6 is an open-source infrastructure for privacy preserving analysis. Versions prior to 5.0.0 provide an initial user with username root and password root. This is not ideal because attackers know that almost all vantage6 servers have a user with username root that probably has admin rights,...
The vulnerability of the ucsi_ccg_sync_control() function in the Linux kernel’s driver/us module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ucsiccgsynccontrol function in the drivers/us module of the Linux operating system is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
curl: CVE-2023-27536: GSS delegation too eager connection re-use
A vulnerability existed in libcurl that could allow the reuse of previously established connections when more strict or no delegation was requested, due to different CURLOPTGSSAPIDELEGATION options not being taken into consideration. An attacker could potentially exploit this vulnerability to...
DEBIAN-CVE-2021-28153
An issue was discovered in GNOME GLib before 2.66.8. When gfilereplace is used with GFILECREATEREPLACEDESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is...
OpenCart Cross Site Request Forgery
Advisory Information: Title: OpenCart CSRF Vulnerability Advisory URL: http://blog.visionsource.org/2010/01/28/opencart-csrf-vulnerability/ Date published: 2010-01-28 Vendors contacted: OpenCart Security Risk: High Vulnerability Description: OpenCart is vulnerable to CSRF attacks using the POST...