12786 matches found
CVE-2023-49938
An issue was discovered in SchedMD Slurm 22.05.x and 23.02.x. There is Incorrect Access Control: an attacker can modified their extended group list that is used with the sbcast subsystem, and open files with an unauthorized set of extended groups. The fixed versions are 22.05.11 and 23.02.7...
cJSON Security Vulnerabilities
cJSON is a lightweight open source JSON parser. A security vulnerability exists in cJSON v1.7.16, which stems from a function cJSONSetValuestring in cJSON.c that contains a segmentation violation...
Microsoft releases lightest Patch Tuesday in three years, no zero-days disclosed
Microsofts monthly security update released Tuesday is the companys lightest in four years, including only 33 vulnerabilities. Perhaps more notable is that there are no zero-day vulnerabilities included in Decembers Patch Tuesday, a rarity for Microsoft this year. The companys regular set of...
PT-2025-3516
Name of the Vulnerable Software and Affected Versions openlink virtuoso-opensource version 7.2.11 Description The issue in the qst vec set component allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations For openlink virtuoso-opensource version 7.2.11,...
PT-2025-3520
Name of the Vulnerable Software and Affected Versions openlink virtuoso-opensource version 7.2.11 Description An issue in the qst vec set copy component allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations For openlink virtuoso-opensource version 7.2.11,...
PT-2024-8268
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a regression introduced by a commit that added general notification queue support, which caused resized pipes to lock up under certain conditions. This occurred...
PT-2024-14638
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A possible NULL pointer dereference in the wfx set mfp ap function has been resolved. The ieee80211 beacon get function can return NULL, and wfx set mfp ap should check the return value...
Tenda AC10 Router SetFirewallCfg Code Execution
The vulnerability of the SetFirewallCfg function in the Tenda AC10 router microprogramming system is related to the issue where the operation’s output goes beyond the buffer boundaries in memory when processing the firewallEn parameter. Exploiting this vulnerability allows a remote attacker to...
CVE-2023-49417
TOTOLink A7000R V9.1.0u.6115B20201022 has a stack overflow vulnerability via setOpModeCfg...
PT-2023-36483
Уязвимость функции kvm arch vcpu ioctl set fpu модуля arch/s390/kvm/kvm-s390.c поддержки платформы S390 ядра операционной системы Linux связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на целостность и доступность защищаемой...
Tenda AX12 /goform/SetVirtualServerCfg interface list parameter buffer overflow vulnerability
Tenda AX12 is a dual-band Gigabit Wi-Fi 6 wireless router designed for home users, supporting dual-band concurrent transmission at up to 2976Mbps. The Tenda AX12 suffers from a buffer overflow vulnerability that originates from the list parameter at /goform/SetVirtualServerCfg that fails to...
Tenda AX9 setDeviceInfo() Arbitrary Command Execution
The vulnerability of the setDeviceInfo function in Tenda AX9 Wi-Fi routers’ microprogramming software is related to the lack of measures taken to protect the SQL query structure when processing the mac parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
PT-2024-14642
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the KVM: s390: fix setting of fpc register in the Linux kernel. The kvm arch vcpu ioctl set fpu function allows setting the floating point control fpc register of...
Tenda AX12 /goform/SetStaticRouteCfg interface list parameter buffer overflow vulnerability
Tenda AX12 is a dual-band Gigabit Wi-Fi 6 wireless router designed for home users, supporting dual-band concurrent transmission at up to 2976Mbps. The Tenda AX12 suffers from a buffer overflow vulnerability that stems from the list parameter of /goform/SetStaticRouteCfg failing to properly valida...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a denial of service vulnerability that originates from the discovery that dpllpinparentpinset in drivers/dpll/dpllnetlink.c contains a null pointer...
CVE-2023-49408
Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the function setdevicename...
CVE-2023-49408
Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the function setdevicename...
CVE-2023-49410
Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function via the function setwanstatus...