The vulnerability of the amdgpu_vce_cs_reloc() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c driver of the Direct Rendering Infrastructure (DRI) AMD GPU kernel for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the amdgpuvcecsreloc function in the drivers/gpu/drm/amd/amdgpu/amdgpuvce.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability...

The vulnerability of the process_rx() function in the drivers/usb/typec/tcpm/tcpci_maxim_core.c file of the driver library affects the confidentiality, integrity, and accessibility of protected information on Linux operating systems with USB TypeC ports. This vulnerability can be exploited by attackers to compromise these security aspects.

The vulnerability of the processrx function in the drivers/usb/typec/tcpm/tcpcimaximcore.c file of the Linux kernel driver for USB TypeC ports is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the sctp_wait_for_connect() function in the net/sctp/socket.c module of the Linux operating system’s SCTP protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sctpwaitforconnect function in the net/sctp/socket.c module of the Linux operating system’s SCTP protocol implementation is related to the lack of measures taken to neutralize numerous internal special elements. Exploiting this vulnerability can allow an attacker to...

The vulnerability of the keyctl_pkey_params_get_2() function in the security/keys/keyctl_pkey.c module of the Linux kernel’s key management component allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the keyctlpkeyparamsget2 function in the security/keys/keyctlpkey.c module, a component of the Linux kernel’s key management framework, is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise...

The vulnerability of the l2tp_session_get_by_ifname() function in the net/l2tp/l2tp_core.c module of the Linux operating system’s L2TP tunneling protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the l2tpsessiongetbyifname function in the net/l2tp/l2tpcore.c module of the Linux operating system’s L2TP tunneling protocol kernel is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to compromise the confidentiality,...

The vulnerability of the qaic_gem_object_mmap() function in the drivers/accel/qaic/qaic_data.c file of the Linux kernel’s acceleration device driver allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qaicgemobjectmmap function in the drivers/accel/qaic/qaicdata.c file of the Linux kernel’s acceleration device driver is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the visit_insn() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support in the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the visitinsn function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter for Linux kernel, relates to the lack of checks for the return value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U allows attackers to bypass authentication by using a user-controlled key, enabling them to execute arbitrary code.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled password. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code as the root user...

The vulnerability of the get_ext_report() function in the drivers/virt/coco/sev-guest/sev-guest.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the getextreport function in the drivers/virt/coco/sev-guest/sev-guest.c module of the Linux kernel is related to improper boundary removal of critical data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

The vulnerability of the dw8250_probe() function in the drivers/tty/serial/8250/8250_dw.c file of the console TTY driver for the serial port of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dw8250probe function in the drivers/tty/serial/8250/8250dw.c file of the console TTY driver in the Linux kernel’s serial port module is related to the assignment of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the ip6_parse_tlv() function in the net/ipv6/exthdrs.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ip6parsetlv function in the net/ipv6/exthdrs.c module of the Linux operating system’s IPv6 kernel implementation is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the RoundCube Webmail email client, related to insufficient validation of requests on the server side, allows a hacker to execute an SSRF attack.

The vulnerability of the RoundCube Webmail email client is related to insufficient validation of requests at the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

The vulnerability of the iscsithandle_textcmd() function in the drivers/target/iscsi/iscsi_target.c module of the Linux operating system’s TCM driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iscsithandletextcmd function in the drivers/target/iscsi/iscsitarget.c module of the Linux operating system’s TCM driver is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the tls_push_record() function in the net/tls/tls_sw.c module of the Linux operating system’s TLS protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tlspushrecord function in the net/tls/tlssw.c module of the TLS protocol implementation in the Linux operating system is related to incorrect handling of structure elements. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrit...

The vulnerability of the function batadv_bla_send_claim() in the net/batman-adv/bridge_loop_avoidance.c module, which is part of the network functions of the Linux operating system’s kernel, allows a hacker to trigger a service failure.

The vulnerability of the function batadvblasendclaim in the net/batman-adv/bridgeloopavoidance.c module, which is part of the network functions of the Linux operating system’s kernel, relates to the assignment of pointers. Exploiting this vulnerability could allow a malicious actor to cause servi...

The vulnerability of the rt6_fill_node() function in the net/ipv6/route.c module of the IPv6 protocol implementation in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the rt6fillnode function in the net/ipv6/route.c module of the IPv6 protocol implementation in the Linux operating system is related to the execution of a loop with an unreachable exit condition an “infinite loop”. Exploitation of this vulnerability could allow a remote...

The vulnerability of the smc_v2_determine_accepted_chid() function in the net/smc/af_smc.c module of the SMC protocol family in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the smcv2determineacceptedchid function in the net/smc/afsmc.c module of the SMC protocol family in the Linux operating system’s kernel is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the sev_dbg_crypt() function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sevdbgcrypt function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the composite_setup() function in the drivers/usb/gadget/composite.c module of the Linux USB device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the compositesetup function in the drivers/usb/gadget/composite.c module of the Linux USB device driver relates to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

The vulnerability of the cfg80211_merge_profile() function in the net/wireless/scan.c module of the Linux operating system’s wireless communication support allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cfg80211mergeprofile function in the net/wireless/scan.c module related to Linux’s wireless communication support is associated with the execution of a loop with an unreachable exit condition an “infinite loop”. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the compatibility package for Microsoft Azure Entra ID, related to the absence of authentication, allows a perpetrator to escalate their privileges.

The vulnerability of the compatibility package for Microsoft Azure Entra ID is related to the absence of authentication. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the phy_prepare_data() function in the net/ethtool/phy.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the phypreparedata function in the net/ethtool/phy.c module of the Linux kernel’s networking functions is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the adreno_get_param() function in the drivers/gpu/drm/msm/adreno/adreno_gpu.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the adrenogetparam function in the drivers/gpu/drm/msm/adreno/adrenogpu.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability can allow a remote attacker to cause a service...

The vulnerability of the amdgpu_hmm_range_get_pages() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_hmm.c driver for the Direct Rendering Infrastructure (DRI) of AMD GPU cores in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the amdgpuhmmrangegetpages function in the drivers/gpu/drm/amd/amdgpu/amdgpuhmm.c driver for the Direct Rendering Infrastructure DRI of AMD GPUs in the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an...

The vulnerability of the vcn_v2_5_dec_ring_set_wptr() function in the drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c driver for AMD GPU cores in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the vcnv25decringsetwptr function in the drivers/gpu/drm/amd/amdgpu/vcnv25.c driver for AMD GPU cores in Linux operating systems is related to improper checking of the specified data type. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

The vulnerability of the _get_outline() function in the pypdf/_doc_common.py library of the Python library for working with PDF files, PyPDF, allows a attacker to cause a service failure.

The vulnerability of the getoutline function in the pypdf/doccommon.py library of the Python PDF handling library PyPDF is related to asymmetric resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ioeventfd_in_range() function in the virt/kvm/eventfd.c module of the Kernel-based Virtual Machine (KVM) virtualization subsystem of the Linux operating system allows a attacker to trigger a service failure.

The vulnerability of the ioeventfdinrange function in the virt/kvm/eventfd.c module of the Kernel-based Virtual Machine KVM virtualization subsystem of the Linux operating system is related to an uncontrolled, exploitable condition. Exploitation of this vulnerability could allow a attacker to...

The vulnerability of the mxuport_calc_num_ports() function in the drivers/usb/serial/mxuport.c module of the Linux operating system’s USB device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mxuportcalcnumports function in the drivers/usb/serial/mxuport.c module of the Linux device driver framework is related to the copying of buffers without checking input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

The vulnerability of the ucsi_handle_connector_change() function in the drivers/usb/typec/ucsi/ucsi.c module of the UCSI interface driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ucsihandleconnectorchange function in the drivers/usb/typec/ucsi/ucsi.c file of the UCSI interface driver for the Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the Microsoft Azure Active Directory B2C access and identity management service allows attackers to bypass authentication by using a user-controlled key, enabling them to escalate their privileges.

The vulnerability of the Microsoft Azure Active Directory B2C access and identity management service relates to the bypassing of authentication processes by using a user-controlled key. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to exploit this to enhance their privileges.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of protective measures for website structures. Exploiting these vulnerabilities can allow attackers to enhance their...

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B arises from incorrect pathname restrictions in the catalog. This allows attackers to bypass security restrictions.

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to incorrect path name restrictions in the catalog. Exploiting this vulnerability can allow an attacker to bypass security restrictions...

The vulnerability of the ipv6_hop_ioam() function in the net/ipv6/exthdrs.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ipv6hopioam function in the net/ipv6/exthdrs.c module of the Linux operating system’s IPv6 kernel implementation is related to the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

The vulnerability of the intel_pmu_enable_event() function in the arch/x86/events/intel/core.c module, which is part of the Linux operating system’s x86 kernel support, allows a hacker to trigger a service failure.

The vulnerability of the intelpmuenableevent function in the arch/x86/events/intel/core.c module, which is part of the Linux operating system’s x86 kernel support, relates to the use of an incomplete blacklist during the processing of input data. Exploiting this vulnerability could allow a...

The vulnerability of the rss_prepare_get() function in the net/ethtool/rss.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the rssprepareget function in the net/ethtool/rss.c module, which is part of the Linux kernel’s networking functions, relates to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the usa49wg_indat_callback() function in the drivers/usb/serial/keyspan.c file of the Linux operating system’s USB device driver module allows a hacker to cause a service failure.

The vulnerability of the usa49wgindatcallback function in the drivers/usb/serial/keyspan.c file of the Linux device driver for USB devices is related to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the bond_enslave() function in the drivers/net/bonding/bond_main.c file of the Linux kernel-based network device driver allows a hacker to cause a service failure.

The vulnerability of the bondenslave function in the drivers/net/bonding/bondmain.c file of the Linux kernel network device driver is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the garp_pdu_parse_attr() function in the net/802/garp.c module, which is part of the networking functions in the Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the garppduparseattr function in the net/802/garp.c module, which is part of the networking functions in the Linux kernel, relates to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the /cgi/file_sharing.cgi file of the File Sharing component of the D-Link DNS-320 networking storage software allows a hacker to execute arbitrary commands.

The vulnerability of the /cgi/filesharing.cgi file of the File Sharing component of the D-Link DNS-320 networking storage software is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary...

The vulnerability of the /api/connections file of the JWT Refresh Token Handler software platform for automated file exchange with Cleo Harmony allows a malicious actor to escalate their privileges and gain unauthorized access to protected information.

The vulnerability of the /api/connections file of the JWT Refresh Token Handler component of the software platform for automated file exchange in Cleo Harmony is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges and gain...

The vulnerability of the program for querying and managing Udisks devices, related to insecure management of privileges, allows a perpetrator to trigger a service failure.

The vulnerability of the program for querying and managing Udisks storage devices is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the updateData() function in the phpMyFAQ web application allows a hacker to gain unauthorized access to protected information.

The vulnerability of the updateData function in the phpMyFAQ web application is related to the lack of necessary checks during password changes. Exploiting this vulnerability could allow an attacker who operates remotely to gain unauthorized access to protected information...

The vulnerability in the `net/sched/act_api.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the net/sched/actapi.c component in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the net/can/bcm.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the net/can/bcm.c component in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ogs_sbi_timeParse() function, a tool for creating and managing NR/LTE Open5GS mobile networks, allows a attacker to cause a service failure.

The vulnerability of the ogssbitimeParse function, a component of the NR/LTE Open5GS network creation and management tool, lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability in the `lib/rhashtable.c` component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability in the lib/rhashtable.c component of the Linux operating system is related to the dereferencing of a pointer whose validity period has expired. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of the unix_gc() component. Igor, MSG_PEEK. Let’s talk about the kernels of the Linux operating system, which allow a hacker to cause a service failure.

Vulnerability of the unixgc component. Igor, MSGPEEK. The kernels of the Linux operating system are vulnerable to pointer dereferencing when the pointer has reached its expiration time. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the GitHub CI workflow server for syntax analysis, Parse Server, allows a perpetrator to gain unauthorized access to protected information and enhance their privileges.

The vulnerability of the GitHub CI workflow server for syntax analysis in Parse Server is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information and enhance their privileges...

The vulnerability of the removeTwofactorConfig() function in the phpMyFAQ web application, which allows a hacker to bypass existing security measures

The vulnerability of the removeTwofactorConfig function in the phpMyFAQ web application is related to the lack of authentication for the critical function. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures remotely...

The vulnerability of the application software interface of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B allows a hacker to execute arbitrary code.

The vulnerability of the application software interface of programming platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to the lack of measures taken to neutralize special elements in the template creation mechanism...