The vulnerability of the ucsi_handle_connector_change() function in the drivers/usb/typec/ucsi/ucsi.c module of the UCSI interface driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ucsihandleconnectorchange function in the drivers/usb/typec/ucsi/ucsi.c file of the UCSI interface driver for the Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the cfg80211_merge_profile() function in the net/wireless/scan.c module of the Linux operating system’s wireless communication support allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cfg80211mergeprofile function in the net/wireless/scan.c module related to Linux’s wireless communication support is associated with the execution of a loop with an unreachable exit condition an “infinite loop”. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the Microsoft Azure Active Directory B2C access and identity management service allows attackers to bypass authentication by using a user-controlled key, enabling them to escalate their privileges.

The vulnerability of the Microsoft Azure Active Directory B2C access and identity management service relates to the bypassing of authentication processes by using a user-controlled key. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to exploit this to enhance their privileges.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of protective measures for website structures. Exploiting these vulnerabilities can allow attackers to enhance their...

The vulnerability of the fbcon_do_set_font() function in the drivers/video/fbdev/core/fbcon.c driver for kernel-based graphics buffer devices in the Linux operating system allows a hacker to gain access to protected information or cause service failures.

The vulnerability of the fbcondosetfont function in the drivers/video/fbdev/core/fbcon.c driver for kernel-based graphics buffer devices in the Linux operating system is related to the execution of operations outside of the buffer’s boundaries. Exploiting this vulnerability could allow an attacke...

The vulnerability of the nvme_free_host_mem_multi() function in the driver/nvme/host/pci.c module of the Linux kernel’s NVME driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the nvmefreehostmemmulti function in the nvme/host/pci.c driver module of the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to exploit this to enhance their privileges.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of protective measures for website structures. Exploiting these vulnerabilities can allow attackers to enhance their...

The vulnerability of the `nxp_sar_adc_write_raw()` function in the `drivers/iio/adc/nxp-sar-adc.c` module of various types of embedded sensor drivers for Linux operating systems allows a malicious actor to cause system failures.

The vulnerability of the nxpsaradcwriteraw function in the iio/adc/nxp-sar-adc.c module of the drivers for various types of embedded sensors in the Linux operating system is related to zero-division errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the bio_integrity_map_user() function in the block/bio-integrity.c module, which supports the block-level kernel in the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the biointegritymapuser function in the block/bio-integrity.c module, which supports the block-level kernel in the Linux operating system, is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nexio_read_data() function in the drivers/input/touchscreen/usbtouchscreen.c file of the touchscreen driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nexioreaddata function in the drivers/input/touchscreen/usbtouchscreen.c module of the touchscreen driver for the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the drm_gem_change_handle_ioctl() function in the drivers/gpu/drm/drm_gem.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the drmgemchangehandleioctl function in the drivers/gpu/drm/drmgem.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the race condition that occurs when a shared resource is used. Exploiting this vulnerability could allow ...

The vulnerability of the BTF_ID() function in the kernel/bpf/bpf_lsm.c module, which is part of the BPF interpreter support for Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the BTFID function in the kernel/bpf/bpflsm.c module, which is part of the Linux operating system’s BPF interpreter support, relates to the use of an unrecoverable function in a parallel context. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the function ieee80211_invoke_fast_rx() in the module net/mac80211/rx.c, part of the mac80211 stack in the Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the function ieee80211invokefastrx in the net/mac80211/rx.c module of the mac80211 stack in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the amdgpu_vce_cs_reloc() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c driver of the Direct Rendering Infrastructure (DRI) AMD GPU kernel for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the amdgpuvcecsreloc function in the drivers/gpu/drm/amd/amdgpu/amdgpuvce.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability...

The vulnerability of the adm1266 gpio_get_multiple() function in the drivers/hwmon/pmbus/adm1266.c file of the device monitoring driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the adm1266 gpiogetmultiple function in the drivers/hwmon/pmbus/adm1266.c file of the device monitoring driver for the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the l2tp_session_get_by_ifname() function in the net/l2tp/l2tp_core.c module of the Linux operating system’s L2TP tunneling protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the l2tpsessiongetbyifname function in the net/l2tp/l2tpcore.c module of the Linux operating system’s L2TP tunneling protocol kernel is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to compromise the confidentiality,...

The vulnerability of the kvm_arch_vcpu_create() function in the arch/arm64/kvm/arm.c module of the virtualization subsystem on the ARM 64-bit kernel-based Linux operating system allows a attacker to cause a service failure.

The vulnerability of the kvmarchvcpucreate function in the arch/arm64/kvm/arm.c module of the virtualization subsystem on the ARM 64-bit kernel-based Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allo...

The vulnerability of the pdsfc_fw_rpc() function in the drivers/fwctl/pds/main.c file of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the pdsfcfwrpc function in the drivers/fwctl/pds/main.c file of the Linux kernel is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the net_devmem_bind_dmabuf() function in the net/core/devmem.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the netdevmembinddmabuf function in the net/core/devmem.c module, which is part of Linux’s kernel-based networking functions, relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the sctp_wait_for_connect() function in the net/sctp/socket.c module of the Linux operating system’s SCTP protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sctpwaitforconnect function in the net/sctp/socket.c module of the Linux operating system’s SCTP protocol implementation is related to the lack of measures taken to neutralize numerous internal special elements. Exploiting this vulnerability can allow an attacker to...

The vulnerability of the keyctl_pkey_params_get_2() function in the security/keys/keyctl_pkey.c module of the Linux kernel’s key management component allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the keyctlpkeyparamsget2 function in the security/keys/keyctlpkey.c module, a component of the Linux kernel’s key management framework, is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise...

The vulnerability of the opfb_mmap() function in the drivers/video/fbdev/omap2/omapfb/omapfb-main.c driver code of the Linux operating system’s frame buffer device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the oppfbmmap function in the drivers/video/fbdev/omap2/omapfb/omapfb-main.c driver for kernel video devices in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the __doTraceBtrfsSyncFile() function in the include/trace/events/btrfs.h module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the doTraceBtrfsSyncFile function in the include/trace/events/btrfs.h header of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ethnl_tsinfo_dump_one_netdev() function in the net/ethtool/tsinfo.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the ethnltsinfodumponenetdev function in the net/ethtool/tsinfo.c module, which is part of the Linux kernel’s networking functions, relates to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the a6xx_gpu_init() function in the drivers/gpu/drm/msm/adreno/a6xx_gpu.c file of the Direct Rendering Infrastructure (DRI) driver module in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the a6xxgpuinit function in the drivers/gpu/drm/msm/adreno/a6xxgpu.c file of the Direct Rendering Infrastructure DRI driver module in the Linux operating system is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the batadv_tp_sender_cleanup() function in the net/batman-adv/tp_meter.c module, which is part of the Linux kernel’s networking functions, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the batadvtpsendercleanup function in the net/batman-adv/tpmeter.c module, which is part of the Linux kernel’s networking functions, is related to situations where there is a race condition in the signal handler. Exploiting this vulnerability allows an attacker to compromise...

The vulnerability of the vti6_siocdevprivate() function in the net/ipv6/ip6_vti.c module of the IPv6 protocol implementation in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vti6siocdevprivate function in the net/ipv6/ip6vti.c module of the IPv6 protocol implementation in the Linux operating system is related to insufficient spatial separation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability in the function amdgpu_gart_table_ram_free() of the drivers/gpu/drm/amd/amdgpu/amdgpu_gart.c driver of the Direct Rendering Infrastructure (DRI) AMD GPU kernel for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the amdgpugarttableramfree function in the drivers/gpu/drm/amd/amdgpu/amdgpugart.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a...

The vulnerability of the process_rx() function in the drivers/usb/typec/tcpm/tcpci_maxim_core.c file of the driver library affects the confidentiality, integrity, and accessibility of protected information on Linux operating systems with USB TypeC ports. This vulnerability can be exploited by attackers to compromise these security aspects.

The vulnerability of the processrx function in the drivers/usb/typec/tcpm/tcpcimaximcore.c file of the Linux kernel driver for USB TypeC ports is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the qaic_gem_object_mmap() function in the drivers/accel/qaic/qaic_data.c file of the Linux kernel’s acceleration device driver allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qaicgemobjectmmap function in the drivers/accel/qaic/qaicdata.c file of the Linux kernel’s acceleration device driver is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the phpMyFAQ web application, related to deficiencies in the authentication process, allows attackers to gain unauthorized access to protected information.

The vulnerability of the phpMyFAQ web application is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the rss_prepare_get() function in the net/ethtool/rss.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the rssprepareget function in the net/ethtool/rss.c module, which is part of the Linux kernel’s networking functions, relates to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the phy_prepare_data() function in the net/ethtool/phy.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the phypreparedata function in the net/ethtool/phy.c module of the Linux kernel’s networking functions is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the usa49wg_indat_callback() function in the drivers/usb/serial/keyspan.c file of the Linux operating system’s USB device driver module allows a hacker to cause a service failure.

The vulnerability of the usa49wgindatcallback function in the drivers/usb/serial/keyspan.c file of the Linux device driver for USB devices is related to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the bond_enslave() function in the drivers/net/bonding/bond_main.c file of the Linux kernel-based network device driver allows a hacker to cause a service failure.

The vulnerability of the bondenslave function in the drivers/net/bonding/bondmain.c file of the Linux kernel network device driver is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the kho_fill_kimage() function in the kernel/liveupdate/kexec_handover.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the khofillkimage function in the kernel/liveupdate/kexechandover.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Advanced Local Procedure Call (ALPC) handler in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Advanced Local Procedure Call ALPC in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the bdev_cache_init() function in the block/bdev.c module, which supports the block-level kernel in the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the bdevcacheinit function in the block/bdev.c module, which supports the block-level kernel in Linux operating systems, is related to the pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the /cgi/file_sharing.cgi file of the File Sharing component of the D-Link DNS-320 networking storage software allows a hacker to execute arbitrary commands.

The vulnerability of the /cgi/filesharing.cgi file of the File Sharing component of the D-Link DNS-320 networking storage software is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary...

The vulnerability of the program for querying and managing Udisks devices, related to insecure management of privileges, allows a perpetrator to trigger a service failure.

The vulnerability of the program for querying and managing Udisks storage devices is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the /api/connections file of the JWT Refresh Token Handler software platform for automated file exchange with Cleo Harmony allows a malicious actor to escalate their privileges and gain unauthorized access to protected information.

The vulnerability of the /api/connections file of the JWT Refresh Token Handler component of the software platform for automated file exchange in Cleo Harmony is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges and gain...

The vulnerability of the updateData() function in the phpMyFAQ web application allows a hacker to gain unauthorized access to protected information.

The vulnerability of the updateData function in the phpMyFAQ web application is related to the lack of necessary checks during password changes. Exploiting this vulnerability could allow an attacker who operates remotely to gain unauthorized access to protected information...

The vulnerability in the `lib/rhashtable.c` component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability in the lib/rhashtable.c component of the Linux operating system is related to the dereferencing of a pointer whose validity period has expired. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the net/can/bcm.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the net/can/bcm.c component in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ogs_sbi_timeParse() function, a tool for creating and managing NR/LTE Open5GS mobile networks, allows a attacker to cause a service failure.

The vulnerability of the ogssbitimeParse function, a component of the NR/LTE Open5GS network creation and management tool, lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability in the `net/sched/act_api.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the net/sched/actapi.c component in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the application software interface of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B allows a hacker to execute arbitrary code.

The vulnerability of the application software interface of programming platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to the lack of measures taken to neutralize special elements in the template creation mechanism...

Vulnerability of the unix_gc() component. Igor, MSG_PEEK. Let’s talk about the kernels of the Linux operating system, which allow a hacker to cause a service failure.

Vulnerability of the unixgc component. Igor, MSGPEEK. The kernels of the Linux operating system are vulnerable to pointer dereferencing when the pointer has reached its expiration time. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the removeTwofactorConfig() function in the phpMyFAQ web application, which allows a hacker to bypass existing security measures

The vulnerability of the removeTwofactorConfig function in the phpMyFAQ web application is related to the lack of authentication for the critical function. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures remotely...

The vulnerability of the GitHub CI workflow server for syntax analysis, Parse Server, allows a perpetrator to gain unauthorized access to protected information and enhance their privileges.

The vulnerability of the GitHub CI workflow server for syntax analysis in Parse Server is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information and enhance their privileges...