6383 matches found
ROS-20251226-7304
Vulnerability in openvpn due to failure to take measures to protect the structure of a web page. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...
The vulnerability of the Zohocorp ManageEngine Exchange Reporter Plus software, a monitoring, analysis, and reporting tool, arises from the lack of protective measures for the website structure. This allows attackers to gain unauthorized access to protected information.
The vulnerability of the monitoring, analysis, and reporting software Zohocorp ManageEngine Exchange Reporter Plus is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected...
The vulnerability of the IBM QRadar SIEM system for event collection and analysis lies in the insufficient protection of the website structure, which allows attackers to disclose protected information.
The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...
The vulnerability of the OpManager, OpManager MSP, and OpManager Plus network monitoring software lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.
The vulnerability of the OpManager, OpManager MSP, and OpManager Plus network monitoring software lies in the lack of security measures for the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
EUVD-2023-60272
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix buffer overrun Klocwork warning: Buffer Overflow - Array Index Out of Bounds Driver uses fcelsflogi to calculate size of buffer. The actual buffer is nested inside of fcelsflogi which is smaller. Replace...
CVE-2023-54054
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2023-54137
In the Linux kernel, the following vulnerability has been resolved: vfio/type1: fix capmigration information leak Fix an information leak where an uninitialized hole in struct vfioiommutype1infocapmigration on the stack is exposed to userspace. The definition of struct...
CVE-2023-54065
In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: fix out-of-bounds access The probe function sets priv-chipdata to void priv + sizeofpriv with the expectation that priv has enough trailing space. However, only realtek-smi actually allocated this chipdata spac...
CVE-2023-54065
CWE/Issue: Linux kernel net: dsa: realtek: fix out-of-bounds access in realtek-mdio probe. Root cause (as stated): The probe assigns priv->chip_data to (void *)priv + sizeof(*priv), assuming trailing space is available. Only realtek-smi allocated this space; realtek-mdio did not, risking out-o...
CVE-2025-68738 wifi: mt76: mt7996: fix null pointer deref in mt7996_conf_tx()
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix null pointer deref in mt7996conftx If a link does not have an assigned channel yet, mt7996viflink returns NULL. We still need to store the updated queue settings in that case, and apply them later. Move th...
CVE-2023-53993 PCI/DOE: Fix memory leak with CONFIG_DEBUG_OBJECTS=y
In the Linux kernel, the following vulnerability has been resolved: PCI/DOE: Fix memory leak with CONFIGDEBUGOBJECTS=y After a pcidoetask completes, its workstruct needs to be destroyed to avoid a memory leak with CONFIGDEBUGOBJECTS=y...
CVE-2023-53993 PCI/DOE: Fix memory leak with CONFIG_DEBUG_OBJECTS=y
In the Linux kernel, the following vulnerability has been resolved: PCI/DOE: Fix memory leak with CONFIGDEBUGOBJECTS=y After a pcidoetask completes, its workstruct needs to be destroyed to avoid a memory leak with CONFIGDEBUGOBJECTS=y...
SUSE CVE-2025-68341
In the Linux kernel, the following vulnerability has been resolved: veth: reduce XDP nodirect return section to fix race As explain in commit fa349e396e48 "veth: Fix race with AFXDP exposing old or uninitialized descriptors" for veth there is a chance after napicompletedone that another CPU can...
PT-2025-52950
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the PCI/DOE subsystem of the Linux kernel when CONFIG DEBUG OBJECTS is enabled. Specifically, the work struct associated with a completed pci doe task is not...
PT-2025-53063
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s networking component related to Realtek DSA drivers. Specifically, the issue involves an out-of-bounds access within the probe function when setting t...
Vulnerability of software for managing IBM Engineering Requirements Management DOORS: Next, the existing structure of the web page, due to lack of protective measures, allows attackers to disclose protected information.
The vulnerability of the IBM Engineering Requirements Management DOORS Next software exists because measures to protect the website structure have not been implemented. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...
The vulnerability of the IBM License Metric Tool’s software management system lies in its lack of measures to protect the structure of web pages. This allows attackers to execute arbitrary code and disclose the protected information.
The vulnerability of the IBM License Metric Tool software management system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code and disclose protected information...
The vulnerability of the IBM Hardware Management Console lies in its lack of measures to protect the structure of the web page, allowing attackers to disclose protected information.
The vulnerability of the IBM Hardware Management Console is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...
The vulnerability of the SAP NetWeaver Application Server ABAP software integration platform, related to the lack of protective measures for website structures, allows attackers to carry out XSS attacks.
The vulnerability of the SAP NetWeaver Application Server ABAP software integration platform is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...