The vulnerability of the store_modes() function in the drivers/video/fbdev/core/fbsysfs.c driver for kernel-based frame buffer devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the storemodes function in the drivers/video/fbdev/core/fbsysfs.c driver for kernel-based frame buffer devices in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the digi_port_init() function in the drivers/usb/serial/digi_acceleport.c file of the Linux operating system’s USB device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the digiportinit function in the drivers/usb/serial/digiacceleport.c module of the Linux device driver framework is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the Microchip SAMA5D4 microcontroller lies in its improper protection against voltage spikes and clock frequency fluctuations, allowing attackers to execute arbitrary code.

The vulnerability of the Microchip SAMA5D4 microcontroller is related to improper protection against voltage spikes and clock frequency fluctuations. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the html_entity_decode() function in the phpMyFAQ web application allows a hacker to execute arbitrary JavaScript code.

The vulnerability of the htmlentitydecode function in the phpMyFAQ web application is related to the lack of protective measures for the website’s structure. Exploiting this vulnerability could allow an attacker to execute arbitrary JavaScript code remotely...

The vulnerability of the p9_client_walk() function in the net/9p/client.c module of the 9P protocol implementation in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the p9clientwalk function in the net/9p/client.c module of the 9P protocol implementation in the Linux operating system is related to the dereferencing of a pointer whose validity period has expired. Exploiting this vulnerability allows an attacker to compromise the...

The vulnerability of the do_flash() function in the drivers/usb/typec/ucsi/ucsi_ccg.c driver for the USB Type C interface in the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the doflash function in the drivers/usb/typec/ucsi/ucsiccg.c driver for the UCSI USB Type-C interface in the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `tcp_ao_delete_key()` function in the `net/ipv4/tcp_ao.c` module, which is part of the IPv4 protocol implementation in Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tcpaodeletekey function in the net/ipv4/tcpao.c module, part of the IPv4 protocol implementation in Linux kernel, relates to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the veml6075_request_measurement() function in the drivers/iio/light/veml6075.c module of the Linux kernel’s sensor driver allows a attacker to access protected information or cause a service failure.

The vulnerability of the veml6075requestmeasurement function in the drivers/iio/light/veml6075.c module of the Linux kernel’s sensor driver is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected...

The vulnerability of the cypress_generic_port_probe() function in the drivers/usb/serial/cypress_m8.c driver for USB device controllers in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cypressgenericportprobe function in the drivers/usb/serial/cypressm8.c driver for Linux USB device drivers is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their inadequate authentication procedures, which allow attackers to escalate their privileges.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

The vulnerability of the phpMyFAQ web application lies in the insufficient control over the frequency of interactions, allowing attackers to bypass existing security mechanisms.

The vulnerability of the phpMyFAQ web application is related to insufficient control over the frequency of interactions. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures remotely...

The vulnerability of the dp_altmode_vdm() function in the drivers/usb/typec/altmodes/displayport.c file of the Linux operating system’s USB TypeC driver allows a malicious actor to cause a service failure.

The vulnerability of the dpaltmodevdm function in the drivers/usb/typec/altmodes/displayport.c file of the USB TypeC driver in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the amdgpu_gem_op_ioctl() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c driver for AMD GPU cores in the Linux operating system’s Direct Rendering Infrastructure (DRI) allows a attacker to cause a service failure.

The vulnerability of the amdgpugemopioctl function in the drivers/gpu/drm/amd/amdgpu/amdgpugem.c driver for AMD GPU cores in the Linux operating system’s Direct Rendering Infrastructure DRI is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability can allow an...

The vulnerability of the ISO9660 driver of the libfsimage library in Xen allows attackers to increase their privileges.

The vulnerability of the ISO9660 driver of the libfsimage library in Xen relates to numerical overflow. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the chap_server_compute_hash() function in the drivers/target/iscsi/iscsi_target_auth.c module of the Linux operating system’s TCM driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the chapservercomputehash function in the drivers/target/iscsi/iscsitargetauth.c module of the Linux kernel’s TCM driver is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the adm1266_nvmem_read_blackbox() function in the drivers/hwmon/pmbus/adm1266.c driver for monitoring hardware in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the adm1266nvmemreadblackbox function in the drivers/hwmon/pmbus/adm1266.c module of the Linux operating system’s device monitoring driver is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to...

The vulnerability of the ipv6_hop_ioam() function in the net/ipv6/exthdrs.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ipv6hopioam function in the net/ipv6/exthdrs.c module of the Linux operating system’s IPv6 kernel implementation is related to the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

The vulnerability of the tegra_i2c_xfer() function in the drivers/i2c/busses/i2c-tegra.c file of the I2C driver module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the tegrai2cxfer function in the drivers/i2c/busses/i2c-tegra.c file of the I2C driver for the Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the intel_pmu_enable_event() function in the arch/x86/events/intel/core.c module, which is part of the Linux operating system’s x86 kernel support, allows a hacker to trigger a service failure.

The vulnerability of the intelpmuenableevent function in the arch/x86/events/intel/core.c module, which is part of the Linux operating system’s x86 kernel support, relates to the use of an incomplete blacklist during the processing of input data. Exploiting this vulnerability could allow a...

The vulnerability of the garp_pdu_parse_attr() function in the net/802/garp.c module, which is part of the networking functions in the Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the garppduparseattr function in the net/802/garp.c module, which is part of the networking functions in the Linux kernel, relates to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the visit_insn() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support in the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the visitinsn function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter for Linux kernel, relates to the lack of checks for the return value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U allows attackers to bypass authentication by using a user-controlled key, enabling them to execute arbitrary code.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled password. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code as the root user...

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U, related to deficiencies in authentication procedures, allows a perpetrator to execute arbitrary code under the root user’s identity.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on behalf of the root user remotely...

The vulnerability of the ip6_parse_tlv() function in the net/ipv6/exthdrs.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ip6parsetlv function in the net/ipv6/exthdrs.c module of the Linux operating system’s IPv6 kernel implementation is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the RoundCube Webmail email client, related to the unlimited distribution of resources, allows attackers to cause service failures.

The vulnerability of the RoundCube Webmail email client is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the usbtmc Interrupt() function in the drivers/usb/class/usbtmc.c module of the Linux operating system’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the usbtmc Interrupt function in the drivers/usb/class/usbtmc.c module of the Linux USB device driver framework is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the adreno_get_param() function in the drivers/gpu/drm/msm/adreno/adreno_gpu.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the adrenogetparam function in the drivers/gpu/drm/msm/adreno/adrenogpu.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability can allow a remote attacker to cause a service...

The vulnerability of the tls_push_record() function in the net/tls/tls_sw.c module of the Linux operating system’s TLS protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tlspushrecord function in the net/tls/tlssw.c module of the TLS protocol implementation in the Linux operating system is related to incorrect handling of structure elements. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrit...

The vulnerability of the tlbFlush() function in the arch/arm64/include/asm/tlb.h header of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tlbFlush function in the arch/arm64/include/asm/tlb.h header of the Linux operating system’s kernel is related to the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the vcn_v2_5_dec_ring_set_wptr() function in the drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c driver for AMD GPU cores in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the vcnv25decringsetwptr function in the drivers/gpu/drm/amd/amdgpu/vcnv25.c driver for AMD GPU cores in Linux operating systems is related to improper checking of the specified data type. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

The vulnerability of the iucv_sock_getsockopt() function in the net/iucv/af_iucv.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iucvsockgetsockopt function in the net/iucv/afiucv.c module, which implements networking functions in the Linux kernel, is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the function batadv_bla_send_claim() in the net/batman-adv/bridge_loop_avoidance.c module, which is part of the network functions of the Linux operating system’s kernel, allows a hacker to trigger a service failure.

The vulnerability of the function batadvblasendclaim in the net/batman-adv/bridgeloopavoidance.c module, which is part of the network functions of the Linux operating system’s kernel, relates to the assignment of pointers. Exploiting this vulnerability could allow a malicious actor to cause servi...

The vulnerability of the rt6_fill_node() function in the net/ipv6/route.c module of the IPv6 protocol implementation in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the rt6fillnode function in the net/ipv6/route.c module of the IPv6 protocol implementation in the Linux operating system is related to the execution of a loop with an unreachable exit condition an “infinite loop”. Exploitation of this vulnerability could allow a remote...

The vulnerability of the l2tp_session_unhash() function in the net/l2tp/l2tp_core.c module of the Linux operating system’s L2TP tunneling protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the l2tpsessionunhash function in the net/l2tp/l2tpcore.c module of the Linux operating system’s L2TP tunneling protocol implementation is related to the execution of a loop with an unreachable exit condition “Infinite loop”. Exploiting this vulnerability could allow an...

The vulnerability of the sev_dbg_crypt() function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sevdbgcrypt function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the composite_setup() function in the drivers/usb/gadget/composite.c module of the Linux USB device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the compositesetup function in the drivers/usb/gadget/composite.c module of the Linux USB device driver relates to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

The vulnerability of the compatibility package for Microsoft Azure Entra ID, related to the absence of authentication, allows a perpetrator to escalate their privileges.

The vulnerability of the compatibility package for Microsoft Azure Entra ID is related to the absence of authentication. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B arises from incorrect pathname restrictions in the catalog. This allows attackers to bypass security restrictions.

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to incorrect path name restrictions in the catalog. Exploiting this vulnerability can allow an attacker to bypass security restrictions...

The vulnerability of the zlib module in CADRA’s Node.js software allows a attacker to cause a service failure.

The vulnerability of the zlib module in CADRA’s Node.js software lies in insufficient validation of input data during the processing of the windowBits parameter. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the ep93xx_spi_setup_dma() function in the drivers/spi/spi-ep93xx.c file of the Linux operating system’s SPI device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ep93xxspisetupdma function in the drivers/spi/spi-ep93xx.c file of the Linux operating system’s SPI device driver is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

The vulnerability in the software for secure file sharing and transmission of SolarWinds Serv-U allows attackers to bypass authentication using a user-controlled key, enabling them to escalate their privileges and gain unauthorized access to protected information.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled key. Exploiting this vulnerability allows an intruder to enhance their privileges and gain unauthorized access to protected...

The vulnerability of the get_ext_report() function in the drivers/virt/coco/sev-guest/sev-guest.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the getextreport function in the drivers/virt/coco/sev-guest/sev-guest.c module of the Linux kernel is related to improper boundary removal of critical data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

The vulnerability of the dw8250_probe() function in the drivers/tty/serial/8250/8250_dw.c file of the console TTY driver for the serial port of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dw8250probe function in the drivers/tty/serial/8250/8250dw.c file of the console TTY driver in the Linux kernel’s serial port module is related to the assignment of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the RoundCube Webmail email client, related to insufficient validation of requests on the server side, allows a hacker to execute an SSRF attack.

The vulnerability of the RoundCube Webmail email client is related to insufficient validation of requests at the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

The vulnerability of the iscsithandle_textcmd() function in the drivers/target/iscsi/iscsi_target.c module of the Linux operating system’s TCM driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iscsithandletextcmd function in the drivers/target/iscsi/iscsitarget.c module of the Linux operating system’s TCM driver is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the amdgpu_hmm_range_get_pages() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_hmm.c driver for the Direct Rendering Infrastructure (DRI) of AMD GPU cores in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the amdgpuhmmrangegetpages function in the drivers/gpu/drm/amd/amdgpu/amdgpuhmm.c driver for the Direct Rendering Infrastructure DRI of AMD GPUs in the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an...

The vulnerability of the _get_outline() function in the pypdf/_doc_common.py library of the Python library for working with PDF files, PyPDF, allows a attacker to cause a service failure.

The vulnerability of the getoutline function in the pypdf/doccommon.py library of the Python PDF handling library PyPDF is related to asymmetric resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the smc_v2_determine_accepted_chid() function in the net/smc/af_smc.c module of the SMC protocol family in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the smcv2determineacceptedchid function in the net/smc/afsmc.c module of the SMC protocol family in the Linux operating system’s kernel is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the ioeventfd_in_range() function in the virt/kvm/eventfd.c module of the Kernel-based Virtual Machine (KVM) virtualization subsystem of the Linux operating system allows a attacker to trigger a service failure.

The vulnerability of the ioeventfdinrange function in the virt/kvm/eventfd.c module of the Kernel-based Virtual Machine KVM virtualization subsystem of the Linux operating system is related to an uncontrolled, exploitable condition. Exploitation of this vulnerability could allow a attacker to...

The vulnerability of the mxuport_calc_num_ports() function in the drivers/usb/serial/mxuport.c module of the Linux operating system’s USB device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mxuportcalcnumports function in the drivers/usb/serial/mxuport.c module of the Linux device driver framework is related to the copying of buffers without checking input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...