The vulnerability affects the libvips image processing library in the Active Storage component of the Ruby on Rails software framework. This allows attackers to execute arbitrary code and gain unauthorized access to protected information.

The vulnerability of the libvips image processing system library, a component of the Active Storage framework in the Ruby on Rails software platform, relates to insecure resource initialization. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely and gain...

The vulnerability of the init_amd_zen1() function in the arch/x86/kernel/cpu/amd.c module, which is part of the Linux operating system’s x86 kernel support, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the initamdzen1 function in the arch/x86/kernel/cpu/amd.c module, which is part of the Linux operating system’s kernel support for x86 platforms, is related to incorrect inter-process boundary removal of critical data. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the smb_lazy_parent_lease_break_close() function in the fs/smb/server/oplock.c module of the Smb subsystem of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the smblazyparentleasebreakclose function in the fs/smb/server/oplock.c module of the Smb subsystem of the Linux operating system is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow a remo...

The vulnerabilities of the functions l2cap_register_user() and l2cap_unregister_user() in the net/bluetooth/l2cap_core.c module of the Linux kernel’s Bluetooth subsystem allow a malicious actor to cause service failures.

The vulnerability of the functions l2capregisteruser and l2capunregisteruser in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow a attacker to cause service...

The vulnerability of the seg6_build_state() function in the net/ipv6/seg6_iptunnel.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the seg6buildstate function in the net/ipv6/seg6iptunnel.c module of the Linux kernel is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mptcp_subflow_init() function in the kernel’s net/mptcp/protocol.c file in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mptcpsubflowinit function in the net/mptcp/protocol.c module of the Linux kernel relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.

The vulnerability of Windows operating system kernels is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability in the implementation of the Secure Boot protocol for operating systems with security features allows a hacker to circumvent security restrictions.

The vulnerability of the Secure Boot implementation for Windows operating systems is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow attackers to circumvent security restrictions...

The vulnerability of the print spooler driver in Windows operating systems allows attackers to disclose sensitive information that is protected by this driver.

The vulnerability of the Windows Print Spooler in operating systems related to print queues is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measure...

The vulnerability of the usb_stor_Bulk_transport() function in the drivers/usb/storage/transport.c file of the Linux operating system’s USB device driver module allows a hacker to cause a service failure.

The vulnerability of the usbstorBulktransport function in the drivers/usb/storage/transport.c file of the Linux device driver module is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the kho_test_init() function in the lib/test_kho.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the khotestinit function in the lib/testkho.c module of the Linux kernel is related to incorrect initialization of resources. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the smb3_fs_contextParseParam() function in the fs/smb/client/fsContext.c module, which is part of the SMB client support for Linux operating systems, allows a hacker to cause a service failure.

The vulnerability of the smb3fscontextParseParam function in the fs/smb/client/fsContext.c module, which is part of the SMB client support in Linux operating systems, involves the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker...

The vulnerability of the nvhdmi_mcp_probe() function in the sound/hda/codecs/hdmi/nvhdmi-mcp.c module of the Linux kernel sound subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nvhdmimcpprobe function in the sound/hda/codecs/hdmi/nvhdmi-mcp.c module of the Linux kernel’s sound subsystem is related to incorrect resource initialization. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability of the s3c24xx_serial_getclk() function in the drivers/tty/serial/samsung_tty.c file of the console TTY driver in the Linux kernel’s serial port allows a hacker to cause a service failure.

The vulnerability of the s3c24xxserialgetclk function in the drivers/tty/serial/samsungtty.c file of the TTY console driver in the Linux kernel’s serial port module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the bm_register_write() function in the fs/binfmt_misc.c module of the Linux file system allows a attacker to cause a service failure.

The vulnerability of the bmregisterwrite function in the fs/binfmtmisc.c file of the Linux kernel file system allows for the exploitation of resources after their valid duration has ended. Exploiting this vulnerability can enable a hacker to cause service failures...

The vulnerability of the DHCPv6 server in the embedded operating system OpenWrt allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the DHCPv6 server in the embedded operating system OpenWrt is related to buffer overflow in the stack. Exploiting this vulnerability can allow a remote attacker to cause service failures or execute arbitrary code...

The vulnerability of the recv_pkt() function in the net/bluetooth/6lowpan.c module of the Linux kernel’s Bluetooth subsystem allows a hacker to cause a service failure.

The vulnerability of the recvpkt function in the net/bluetooth/6lowpan.c module of the Linux Bluetooth subsystem is related to the improper disabling or release of resources. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

The vulnerability of the sqlite3ExprListDelete() function in the expr.c file of the SQLite database management system allows a attacker to cause a service failure, expose sensitive information, or execute arbitrary code.

The vulnerability of the sqlite3ExprListDelete function in the expr.c file of the SQLite database management system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause service interruptions, expose sensitive information, or execute...

The vulnerability of the locally deployed version of the orchestrator VeloCloud Orchestrator (VCO) on the On-Prem platform for managing programmatically configured VMware SD-WAN by VeloCloud allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the locally deployed version of the orchestrator VeloCloud Orchestrator VCO on the VMware SD-WAN by VeloCloud On-Prem platform is related to the failure to implement measures to neutralize certain elements. Exploiting this vulnerability could allow a malicious actor to...

The vulnerability of the isInternalPath() function in the web framework Astro, which allows attackers to carry out phishing attacks.

The vulnerability of the isInternalPath function in the web framework Astro relates to the redirection of URLs to unreliable websites. Exploiting this vulnerability could allow a remote attacker to carry out phishing attacks...

The vulnerability of the __folio_split() function in the mm/huge_memory.c module of the Linux kernel’s memory management subsystem allows a hacker to trigger a system failure.

The vulnerability of the foliosplit function in the mm/hugememory.c module of the Linux kernel’s memory management subsystem is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the pegasus_probe() function in the drivers/input/tablet/pegasus_notetaker.c file of the Linux device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pegasusprobe function in the drivers/input/tablet/pegasusnotetaker.c module of the Linux device driver framework is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability allows a remote attacker to compromise the...

The vulnerability of the nft_ct_helper_obj_eval() function in the net/netfilter/nft_ct.c module of the netfilter component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nftcthelperobjeval function in the net/netfilter/nftct.c module of the netfilter component of the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the amdgpu_userq_fence_driver_process() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c source file of the Direct Rendering Infrastructure (DRI) driver for AMD GPU cores in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the amdgpuuserqfencedriverprocess function in the drivers/gpu/drm/amd/amdgpu/amdgpuuserqfence.c source code of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to the occurrence of mutual locking. Exploiting this...

The vulnerability of the bnxt_shutdown() function in the drivers/net/ethernet/broadcom/bnxt/bnxt.c file of the Broadcom Ethernet network adapter driver in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bnxtshutdown function in the drivers/net/ethernet/broadcom/bnxt/bnxt.c file of the Broadcom Ethernet network adapter driver in the Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an...

The vulnerability of the Flask-Reuploaded server’s file loading library, related to an incorrect path name limitation for the directory, allows attackers to gain unauthorized access to write arbitrary files or execute arbitrary code.

The vulnerability of the Flask-Reuploaded file loading library is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to write arbitrary files or execute arbitrary code by injecting templates at t...

The vulnerability of the RC-server of the cloud synchronization tool Rclone allows a hacker to execute arbitrary code.

The vulnerability of the RC-server of the cloud synchronization tool Rclone relates to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request to the operations/fsinfo endpoi...

The vulnerability of the Metabase data visualization and reporting software, related to deficiencies in the deserialization mechanism, allows a perpetrator to execute arbitrary code.

The vulnerability of the Metabase data visualization and reporting software is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents allows a intruder to gain full control over the system.

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker...

The vulnerability of the inet_diag_msg_sctpladdrs_fill() function in the net/sctp/diag.c module of the Linux operating system’s kernel implementation of the SCTP protocol allows a attacker to cause a service failure.

The vulnerability of the inetdiagmsgsctpladdrsfill function in the net/sctp/diag.c module of the SCTP protocol implementation in the Linux operating system is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to...

The vulnerability of the cifs_construct_tcon() function in the fs/smb/client/connect.c module, which is part of the SMB client support in Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the cifsconstructtcon function in the fs/smb/client/connect.c module, which is part of the SMB client support in Linux kernel, involves the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to cause service...

The vulnerability of the cfids_invalidation_worker() function in the fs/smb/client/cached_dir.c module allows a hacker to trigger a service failure in Linux-based operating systems with SMB client support.

The vulnerability of the cfidsinvalidationworker function in the fs/smb/client/cacheddir.c module of the SMB client kernel in Linux operating systems is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the json_remove() function in the json.c file of the SQLite database management system allows a attacker to cause a service failure, disclose sensitive information, or execute arbitrary code.

The vulnerability of the jsonremove function in the json.c file of the SQLite database management system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause service failures, disclose sensitive information, or execute arbitrary code...

The vulnerabilities of the components camel-langchain4j-tools, camel-langchain4j-agent, and camel-spring-ai-tools from the Java framework Apache Camel allow attackers to execute arbitrary code, perform SSRF attacks, or gain read-write access to arbitrary files.

The vulnerability of the components camel-langchain4j-tools, camel-langchain4j-agent, and camel-spring-ai-tools from the Java framework Apache Camel is related to insufficient input data validation. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code, perform an...

The vulnerability of the MDaemon email server, related to the lack of protective measures for the website structure, allows attackers to execute arbitrary code and gain unauthorized access to confidential information.

The vulnerability of the MDaemon email server is related to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and gain unauthorized access to confidential information...

The vulnerabilities of the centralized management software from Check Point Security Management and Multi-Domain Security Management are related to deficiencies in authentication procedures, allowing attackers to execute arbitrary commands.

The vulnerabilities of the centralized management software from Check Point Security Management and Multi-Domain Security Management are related to deficiencies in authentication procedures. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary commands remotely...

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents allows a intruder to gain full control over the system.

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to access control errors. Exploiting this vulnerability could allow an attacker to gain full control over the...

The vulnerability of the dp_retrain_link_dp_test() function in the drivers/gpu/drm/amd/display/dc/link/accessories/link_dp_cts.c driver for AMD graphics cards’ Direct Rendering Infrastructure (DRI) in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the dpretrainlinkdptest function in the drivers/gpu/drm/amd/display/dc/link/accessories/linkdpcts.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to state management errors. Exploiting this vulnerability...

The vulnerability of the memfd_alloc_folio() function in the mm/memfd.c module of the Linux kernel’s memory management subsystem allows a hacker to gain unauthorized access to protected information.

The vulnerability of the memfdallocfolio function in the mm/memfd.c module of the Linux kernel’s memory management subsystem is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the ipv4 component in the Linux operating system’s kernel allows attackers to increase their privileges and cause service interruptions.

The vulnerability of the ipv4 component in the Linux operating system’s kernel is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to increase their privileges and cause service interruptions...

The vulnerabilities of the functions hung_task_set_blocker() and hung_task_clear_blocker() in the module include/linux/hung_task.h of the Linux kernel allow a malicious actor to cause a service failure.

The vulnerability of the functions hungtasksetblocker and hungtaskclearblocker in the include/linux/hungtask.h module of the Linux kernel is related to data errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the bpf_local_storage_update() function in the kernel/bpf/bpf_local_storage.c module allows a hacker to cause a service failure.

The vulnerability of the bpflocalstorageupdate function in the kernel/bpf/bpflocalstorage.c file, which is part of the Linux kernel’s BPF support for operating system functions, relates to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the function mxsfb_plane_overlay_atomic_update() in the module drivers/gpu/drm/mxsfb/mxsfb_kms.c of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mxsfbplaneoverlayatomicupdate function in the drivers/gpu/drm/mxsfb/mxsfbkms.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a servic...

The vulnerability in the web-based administration interface of Check Point Gaia Portal for the Gaia operating system allows a hacker to increase their privileges and gain full control over the device.

The vulnerability in the Check Point Gaia Portal administrative web interface of the Gaia operating system is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to increase their privileges and gain full control over the device...

The vulnerability of the eem_unwrap() function in the drivers/usb/gadget/function/f_eem.c file of the Linux operating system’s USB gadget driver module allows a hacker to cause a service failure.

The vulnerability of the eemunwrap function in the drivers/usb/gadget/function/feem.c file of the Linux operating system’s USB gadget driver framework is related to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the ttm_bo_swapout() function in the drivers/gpu/drm/ttm/ttm_bo.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ttmboswapout function in the drivers/gpu/drm/ttm/ttmbo.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the grab_requested_mnt_ns() function in the fs/namespace.c module of the Linux kernel file system allows a attacker to trigger a service failure.

The vulnerability of the grabrequestedmntns function in the fs/namespace.c module of the Linux kernel file system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the btusb_mtk_claim_iso_intf() function in the drivers/bluetooth/btusb.c module of the Linux Bluetooth kernel driver allows a hacker to cause a service failure.

The vulnerability of the btusbmtkclaimisointf function in the drivers/bluetooth/btusb.c module of the Linux Bluetooth device driver relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the io_sendmsg_zc() function in the io_uring/net.c module of the Linux kernel’s asynchronous input/output interface allows a attacker to cause a service failure.

The vulnerability of the iosendmsgzc function in the iouring/net.c module of the Linux kernel’s asynchronous input/output interface is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the scsi_host_busy() function in the drivers/scsi/hosts.c module of the Linux operating system’s SCSI device driver allows a attacker to cause a service failure.

The vulnerability of the scsihostbusy function in the drivers/scsi/hosts.c module of the Linux SCSI device driver framework is related to improper initialization of resources. Exploiting this vulnerability could allow an attacker to cause service failures...