The vulnerability of the dm_integrity_init() function in the drivers/md/dm-integrity.c file of the multi-device (RAID and LVM) driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dmintegrityinit function in the drivers/md/dm-integrity.c file of the multi-device RAID and LVM driver for the Linux operating system is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the damos_new_filter() function in the mm/damon/core.c module of the Linux kernel’s memory management subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the damosnewfilter function in the mm/damon/core.c module of the Linux kernel’s memory management subsystem is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...

The vulnerability of the `btrfs_create_pending_block_groups()` function in the `fs/btrfs/block-group.c` file of the Linux kernel’s filesystem allows a attacker to cause a service failure.

The vulnerability of the btrfscreatependingblockgroups function in the fs/btrfs/block-group.c file of the Linux kernel’s filesystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the iptunnel_pmtud_build_icmp() function in the net/ipv4/ip_tunnel_core.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iptunnelpmtudbuildicmp function in the net/ipv4/iptunnelcore.c module of the Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

The vulnerability of the functions esp_output_tcp_finish() (net/ipv4/esp4.c) and esp_output_tcp_finish() (net/ipv6/esp6.c) in the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the espoutputtcpfinish function net/ipv4/esp4.c and espoutputtcpfinish function net/ipv6/esp6.c in the Linux kernel is related to improper memory release mechanisms memory leaks. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of microprogrammed software in embedded access controllers of Dell iDRAC9 lies in the insufficient protection of service data when transitioning to debugging mode, allowing a intruder to gain unauthorized access to protected information.

The vulnerability of microprogramming software in embedded access controllers of Dell iDRAC9 relates to insufficient protection of service data when entering debugging mode. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the snd_proto_probe() function in the sound/soc/atmel/mikroe-proto.c module allows a hacker to cause a system failure in the Linux operating system’s SoC kernel.

The vulnerability of the sndprotoprobe function in the sound/soc/atmel/mikroe-proto.c module of the Linux operating system’s sound support module is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Coturn web server, related to access control errors, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Coturn web server is related to access control errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the JWT implementation in Python PyJWT lies in the insufficient verification of data authenticity. This allows attackers to bypass existing security mechanisms.

The vulnerability of the JWT implementation in Python PyJWT is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms remotely...

Vulnerability of the yuv_ensure_buffer() function in the RDP client FreeRDP, allowing a intruder to execute arbitrary code

The vulnerability of the yuvensurebuffer function in the RDP client FreeRDP is related to incorrect calculations of the size of the buffer allocated. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted NAL packets...

The vulnerability of microprogrammed software in Dell’s iDRAC9 and iDRAC10 embedded access controllers, related to improper management of processes, allows a intruder to execute arbitrary code.

The vulnerability of microprogrammed software in embedded access controllers of Dell’s iDRAC9 and iDRAC10 lies in improper management of processes. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the smp_execute_task_sg() function in the drivers/scsi/libsas/sas_expander.c driver of Linux’s SCSI device kernel exposes the confidentiality, integrity, and accessibility of protected information to attacks by attackers.

The vulnerability of the smpexecutetasksg function in the drivers/scsi/libsas/sasexpander.c file of the Linux SCSI device driver module is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the iavf_alloc_q_vectors() function in the drivers/net/ethernet/intel/iavf/iavf_main.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iavfallocqvectors function in the drivers/net/ethernet/intel/iavf/iavfmain.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote...

The vulnerability of the spi_qupremove() function in the drivers/spi/spi-qup.c module of the Linux operating system’s SPI device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the spiqupremove function in the drivers/spi/spi-qup.c module of the Linux operating system’s SPI device driver relates to a memory leak. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the formSetQosBand() function (/goform/SetNetControlList) in the Tenda AC21 router software allows a attacker to cause a service failure.

The vulnerability of the formSetQosBand function /goform/SetNetControlList of the Tenda AC21 router’s software lies in the fact that the operation’s output is stored outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure by sending a...

The vulnerability of LLM-powered system startups, related to deficiencies in authentication mechanisms, allows attackers to view and modify settings.

The vulnerability of LLM-based system startups is related to deficiencies in authentication mechanisms. Exploiting this vulnerability allows a remote attacker to view and modify system settings...

The vulnerability of the getTableSchemaSql() function in the LLM system, which allows attackers to execute arbitrary SQL commands.

The vulnerability of the getTableSchemaSql function in the large language model LLM running and management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of LLM-powered system startups, related to authentication mechanisms that allow unauthorized access to read, modify, and delete data.

The vulnerability of LLM-based system implementations is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to gain access to read, modify, and delete data...

The vulnerability in the frontend/src/utils/chat/markdown.js script of the LLM system’s launch and management framework, which allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability in the frontend/src/utils/chat/markdown.js script of the LLM system’s startup and management mechanism is related to insufficient protection of the web page structure. Exploiting this vulnerability could allow a malicious actor to perform XSS attacks across different websites...

The vulnerability in the fs/btrfs/inode.c module of the Linux operating system allows a hacker to gain access to and modify data.

The vulnerability in the fs/btrfs/inode.c module of the Linux operating system is related to the unlocking of a resource that should not be unlocked. Exploiting this vulnerability could allow an attacker to gain access to read and modify data...

The vulnerability in the built-in command-line interface (CLI) of the Jenkins automation server allows a attacker to execute a Cross-Site WebSocket Hijacking attack.

The vulnerability in the built-in command-line interface CLI of the Jenkins automation server is related to the dependence of critical actions on the reverse DNS solution. Exploiting this vulnerability allows a malicious actor to execute a Cross-Site WebSocket Hijacking attack remotely...

The vulnerability of the ImportedPlugin.importCommunityItemFromUrl() function in the LLM system’s runtime and management framework allows a malicious actor to execute arbitrary code.

The vulnerability of the ImportedPlugin.importCommunityItemFromUrl function in the LLM system is related to an incorrect restriction on the path name of the catalog. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

The vulnerability of the LLM system for launching and managing large language models (LLM) allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of LLM-powered systems is related to configuration errors in CORS policies. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the formwrlSSIDset() function in the Tenda W3 wireless access point software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formwrlSSIDset function in the Tenda W3 wireless access point software arises due to a buffer overflow on the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the __bio_release_pages() function in the block/bio.c module, which supports the block-level kernel in the Linux operating system. This vulnerability allows a attacker to cause a service failure.

The vulnerability of the bioreleasepages function in the block/bio.c module, which supports the block-level kernel in the Linux operating system, is related to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the formwrlSSIDget() function (/goform/wifiSSIDget) in the Tenda i12 wireless access point software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the formwrlSSIDget function /goform/wifiSSIDget in the Tenda i12 wireless access point software is caused by a buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

The vulnerability of the `qsee_uefi_get_variable()` function in the `drivers/firmware/qcom/qcom_qseecom_uefisecapp.c` driver file, a Linux kernel-supported firmware driver, allows a hacker to cause a system failure.

The vulnerability of the qseeuefigetvariable function in the drivers/firmware/qcom/qcomqseecomuefisecapp.c driver code related to the Linux kernel-based firmware support module is due to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability could...

The vulnerability of the dpll_device_get_by_id() function in the drivers/dpll/dpll_core.c module of the DPLL kernel driver of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dplldevicegetbyid function in the drivers/dpll/dpllcore.c module of the DPLL kernel driver of the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the formwrlSSIDget() function (/goform/wifiSSIDget) in the Tenda i12 wireless access point software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the formwrlSSIDget function /goform/wifiSSIDget in the Tenda i12 wireless access point software is caused by a buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

The vulnerability of the set_freepointer() function in the mm/slub.c module of the Linux kernel’s memory management subsystem allows a hacker to cause a service failure.

The vulnerability of the setfreepointer function in the mm/slub.c module of the Linux kernel’s memory management subsystem is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the tze_seq_start() function in the drivers/thermal/thermal Debugfs.c module of the Linux kernel’s temperature management driver allows a hacker to cause a system failure.

The vulnerability of the tzeseqstart function in the drivers/thermal/thermal Debugfs.c module of the Linux kernel’s temperature control driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the __rb_map_vma() function in the kernel/trace/ring_buffer.c module, which supports Linux operating system kernel tracing, allows a hacker to cause a service failure.

The vulnerability of the rbmapvma function in the kernel/trace/ringbuffer.c module, which supports kernel tracing in Linux operating systems, is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the blkcg_css_online() function in the block/blk-cgroup.c module, which supports the block-level kernel in the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the blkcgcssonline function in the block/blk-cgroup.c module, which supports the block-level kernel in Linux, is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause service failures...

Vulnerability of the access control mechanism for the Biztrx24 business management service and the 1C-Biztrx website content management system: Unauthorized access is possible, allowing unauthorized users to obtain unauthorized access to server-related information.

Vulnerability of access control for Bitrix24 business management services and 1C-Bitrix website content management systems: Website management is associated with the absence of authentication. Exploiting this vulnerability can allow unauthorized users to gain unauthorized access to server-related...

The vulnerability of the formwrlSSIDget() function in the Tenda W3 wireless access point software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formwrlSSIDget function in the Tenda W3 wireless access point software is caused by a buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the qcom_qmpPhyCreate() function in the drivers/phy/qualcomm/phy-qcom-qmp.c driver module allows a hacker to cause a service failure.

The vulnerability of the qcomqmpPhyCreate function in the drivers/phy/qualcomm/phy-qcom-qmp.c file of the Linux kernel PHY support driver relates to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the SCADA system Simple-Scada, related to the insecure storage of confidential information, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the SCADA system Simple-Scada is related to the insecure storage of confidential information. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the cl_stream_prepare() function in the sound module/soc/sof/intel/hda-loader.c code allows a hacker to cause a system failure in the Linux operating system’s SoC audio support.

The vulnerability of the clstreamprepare function in the sound module/soc/sof/intel/hda-loader.c, which is related to SoC-based Linux operating system sound support, involves a pointer manipulation issue. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the pstorePutBackendRecords() function in the fs/pstore/inode.c module, which supports the Linux kernel’s persistent storage mechanism, allows a attacker to cause a service failure.

The vulnerability of the pstoreputbackendrecords function in the fs/pstore/inode.c module, which is part of the Linux kernel’s persistent storage support, is related to a error that occurs when memory previously released is reclaimed. Exploiting this vulnerability could allow an attacker to cause...

The vulnerability of the fastrpc_req_mem_unmap_impl() function in the drivers/misc/fastrpc.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fastrpcreqmemunmapimpl function in the drivers/misc/fastrpc.c module of the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the btf_name_valid_section() function in the kernel/bpf/btf.c module, which supports the BPF interpreter of the Linux operating system. This vulnerability allows an attacker to access protected information or cause a service failure.

The vulnerability of the btfnamevalidsection function in the kernel/bpf/btf.c module, which is part of the BPF interpreter support for the Linux operating system, involves reading beyond the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to access protected information...

The vulnerability of the qcom_qmpPhyCreate() function in the drivers/phy/qualcomm/phy-qcom-qmp.c driver module allows a hacker to cause a service failure.

The vulnerability of the qcomqmpPhyCreate function in the drivers/phy/qualcomm/phy-qcom-qmp.c file of the Linux kernel PHY support driver relates to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the fuse_read_args_fill() function in the fs/fuse/file.c module, which supports the Linux file system, allows a hacker to cause a service failure.

The vulnerability of the fusereadargsfill function in the fs/fuse/file.c module of the Linux kernel’s file system support mechanism is related to incorrect input data validation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ks8851_rx_pkts() function in the drivers/net/ethernet/micrel/ks8851_common.c file of the Ethernet adapter support driver for the Micrel kernel in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ks8851rxpkts function in the drivers/net/ethernet/micrel/ks8851common.c file of the Ethernet adapter support driver in the Micrel Linux kernel is related to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the `__cow_file_rangeInline()` function in the fs/btrfs/inode.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the cowfilerangeInline function in the fs/btrfs/inode.c module of the Linux kernel is related to the lack of resource release after the expiration of the license period. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page from a remote location...

The vulnerability of the LoadNinja plugin in Jenkins automation servers, related to the storage of keys in an open manner, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the LoadNinja plugin in Jenkins automation servers lies in the storage of keys in an open manner within the config.xml file. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the LoadNinja plugin in Jenkins automation servers, related to the storage of keys in an open manner, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the LoadNinja plugin in Jenkins automation servers lies in the storage of keys in an open manner within the config.xml file. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Jenkins automation server lies in the improper handling of symbolic links before accessing files. This allows attackers to write arbitrary files.

The vulnerability of the Jenkins automation server relates to the improper handling of symbolic links before accessing files during the extraction of .tar and .tar.gz archives. Exploiting this vulnerability allows a remote attacker to write arbitrary files...