10253 matches found
net/packet: fix a race in packet_set_ring() and packet_notifier()
...
can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode
...
Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump
...
serial: sc16is7xx: fix invalid FIFO access with special register set
...
CVE-2025-9813
A vulnerability was identified in Tenda CH22 1.0.0.1. This issue affects the function formSetSambaConf of the file /goform/SetSambaConf. The manipulation of the argument sambauserNameSda leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available an...
The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.
...
PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar()
...
cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost
...
PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()
...
scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs
...
CVE-2025-50757
Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the setsysadm function via the username parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...
CVE-2025-50755
Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the setsyscmd function via the command parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...
CVE-2024-48705
Wavlink AC1200 with firmware versions M32A3V1410230602 and M32A3V1410240222 are vulnerable to a post-authentication command injection while resetting the password. This vulnerability is specifically found within the "setsysadm" function of the "adm.cgi" binary, and is due to improper santization ...
PT-2025-36055
Name of the Vulnerable Software and Affected Versions: VoicemailNotificationSettingsUtil.java affected versions not specified Description: A cross-user data leak exists due to a confused deputy condition within the setRingtoneUri function of the VoicemailNotificationSettingsUtil.java file. This...
PT-2025-36049
Name of the Vulnerable Software and Affected Versions: AssociationRequest.java affected versions not specified Description: A logic error in the setDisplayName function within the AssociationRequest.java file may allow an application to retain CDM association. This could potentially lead to local...
Linux Distros Unpatched Vulnerability : CVE-2011-4203
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CRLF injection vulnerability in calendar/set.php in the Calendar component in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, 2.1.x before 2.1.3, and 2.2 allows...
sched: fix warning in sched_setaffinity
...
drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
...
The png_set_text_2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted text chunk in a PNG image file, which triggers a memory allocation failure that is not properly handled, leading to a heap-based buffer overflow.
...