DHCP Client Service Privilege Escalation

The vulnerability of the DHCP Client Service for Windows operating systems is related to a countable level of significance loss. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

Sensor Data Service Windows Privilege Escalation

The vulnerability of the Sensor Data Service system service in Windows operating systems is related to unauthorized access to the indexed resource. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Linux Kernel RxRPC DoS

The vulnerability of the rxrpcserverkeyring function in the net/rxrpc/serverkey.c module, which supports RxRPC session sockets in Linux operating systems, is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service...

ADFS DoS

The vulnerability of the Active Directory Federation Services ADFS for Windows operating systems is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Windows kernel Privilege Escalation

The vulnerability of Windows operating system kernels is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Linux NFS Client Buffer Overflow DoS

The vulnerability of the nfsmatchclient function in the fs/nfs/client.c module, which is part of the NFS client support in Linux kernel, is related to authentication errors. Exploiting this vulnerability could allow an attacker to cause service failures...

ttm_bo_swapout Heap Buffer Overflow DoS

The vulnerability of the ttmboswapout function in the drivers/gpu/drm/ttm/ttmbo.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a system failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the grabrequestedmntns function in the fs/namespace.c module of the Linux kernel file system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel memfd_alloc_folio Heap Buffer Overflow DoS

The vulnerability of the memfdallocfolio function in the mm/memfd.c module of the Linux kernel’s memory management subsystem is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to gain unauthorized access to protected information...

Linux USB Bulk Transport DoS

The vulnerability of the usbstorBulktransport function in the drivers/usb/storage/transport.c file of the Linux device driver module is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause a service failure...

bpf_local_storage_update Heap Buffer Overflow DoS

The vulnerability of the bpflocalstorageupdate function in the kernel/bpf/bpflocalstorage.c file, which is part of the Linux kernel’s BPF support for operating system functions, relates to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause a service...

Linux SCSI Host Busy Buffer Overflow DoS

The vulnerability of the scsihostbusy function in the drivers/scsi/hosts.c module of the Linux SCSI device driver framework is related to improper initialization of resources. Exploiting this vulnerability could allow an attacker to cause service failures...

SMB Client Heap Buffer Overflow DoS

The vulnerability of the smb3fscontextParseParam function in the fs/smb/client/fsContext.c module, which is part of the SMB client support in Linux operating systems, involves the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker...

Linux device driver framework Pegasus Probe

The vulnerability of the pegasusprobe function in the drivers/input/tablet/pegasusnotetaker.c module of the Linux device driver framework is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability allows a remote attacker to compromise the...

Linux fs/namespace.c statmount_string() Buffer Overflow DoS

The vulnerability of the statmountstring function in the fs/namespace.c file of the Linux kernel file system relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel sound subsystem Heap Buffer Overflow

The vulnerability of the nvhdmimcpprobe function in the sound/hda/codecs/hdmi/nvhdmi-mcp.c module of the Linux kernel’s sound subsystem is related to incorrect resource initialization. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

amdgpu_userq_fence_driver_process Heap Overflow DoS

The vulnerability of the amdgpuuserqfencedriverprocess function in the drivers/gpu/drm/amd/amdgpu/amdgpuuserqfence.c source code of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to the occurrence of mutual locking. Exploiting this...

Linux kernel Bluetooth recv_pkt() Buffer Overflow DoS

The vulnerability of the recvpkt function in the net/bluetooth/6lowpan.c module of the Linux Bluetooth subsystem is related to the improper disabling or release of resources. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

S390 Platform Support Linux Heap Buffer Overflow DoS

The vulnerability of the zpcieventattempterrorrecovery function in the arch/s390/pci/pcievent.c module of the S390 platform support for the Linux operating system is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

VeloCloud Orchestrator Local Data Compromise

The vulnerability of the locally deployed version of the orchestrator VeloCloud Orchestrator VCO on the VMware SD-WAN by VeloCloud On-Prem platform is related to the failure to implement measures to neutralize certain elements. Exploiting this vulnerability could allow a malicious actor to...

camel-langchain4j-tools SSRF

The vulnerability of the components camel-langchain4j-tools, camel-langchain4j-agent, and camel-spring-ai-tools from the Java framework Apache Camel is related to insufficient input data validation. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code, perform an...

SQLite expr.c Heap Buffer Overflow DoS

The vulnerability of the sqlite3ExprDelete function in the expr.c file of the SQLite database management system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause service failures or memory leaks...

Flask-Reuploaded Path Traversal

The vulnerability of the Flask-Reuploaded file loading library is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to write arbitrary files or execute arbitrary code by injecting templates at t...

Oracle WebCenter Enterprise Capture Client Bundle Full Control

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to access control errors. Exploiting this vulnerability could allow an attacker to gain full control over the...

Linux Bluetooth Kernel Driver Heap Buffer Overflow DoS

The vulnerability of the btusbmtkclaimisointf function in the drivers/bluetooth/btusb.c module of the Linux Bluetooth device driver relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux SMB Client Heap Buffer Overflow DoS

The vulnerability of the cifsconstructtcon function in the fs/smb/client/connect.c module, which is part of the SMB client support in Linux kernel, involves the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to cause service...

Linux kernel io_uring Buffer Overflow DoS

The vulnerability of the iosendmsgzc function in the iouring/net.c module of the Linux kernel’s asynchronous input/output interface is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Memory Management Heap Buffer Overflow DoS

The vulnerability of the foliosplit function in the mm/hugememory.c module of the Linux kernel’s memory management subsystem is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux kernel IPv4 Privilege Escalation

The vulnerability of the ipv4 component in the Linux operating system’s kernel is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to increase their privileges and cause service interruptions...

Linux kernel Hung Task DoS

The vulnerability of the functions hungtasksetblocker and hungtaskclearblocker in the include/linux/hungtask.h module of the Linux kernel is related to data errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

lib/test_kho.c Kernel Data Compromise

The vulnerability of the khotestinit function in the lib/testkho.c module of the Linux kernel is related to incorrect initialization of resources. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel timer Heap Buffer Overflow DoS

The vulnerability of the trytodeltimersync function in the kernel/time/timer.c module of the Linux timer subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

netfilter Heap Buffer Overflow DoS

The vulnerability of the nftcthelperobjeval function in the net/netfilter/nftct.c module of the netfilter component of the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Direct Rendering Infrastructure Heap Buffer Overflow DoS

The vulnerability of the mxsfbplaneoverlayatomicupdate function in the drivers/gpu/drm/mxsfb/mxsfbkms.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a servic...

Linux kernel Serial Port Buffer Overflow DoS

The vulnerability of the s3c24xxserialgetclk function in the drivers/tty/serial/samsungtty.c file of the TTY console driver in the Linux kernel’s serial port module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux net/ipv4/route.c Heap Buffer Overflow DoS

The vulnerability of the fnheremoveoldest function in the net/ipv4/route.c module of the Linux operating system is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux SCTP Heap Buffer Overflow DoS

The vulnerability of the inetdiagmsgsctpladdrsfill function in the net/sctp/diag.c module of the SCTP protocol implementation in the Linux operating system is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to...

Broadcom Ethernet Network Adapter Driver Buffer Overflow

The vulnerability of the bnxtshutdown function in the drivers/net/ethernet/broadcom/bnxt/bnxt.c file of the Broadcom Ethernet network adapter driver in the Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an...

SQLite jsonBlobEdit Heap Buffer Overflow DoS

The vulnerability of the jsonBlobEdit function in the json.c file of the SQLite database management system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause service failures, disclose sensitive information, or perform arbitrary actio...

SQLite json_remove Heap Buffer Overflow DoS

The vulnerability of the jsonremove function in the json.c file of the SQLite database management system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause service failures, disclose sensitive information, or execute arbitrary code...

Mobile OS Buffer Overflow DoS

The vulnerability of operating systems such as watchOS, visionOS, tvOS, macOS, iOS, and iPadOS is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

SQLite Heap Buffer Overflow DoS

The vulnerability of the sqlite3ReleaseTempReg function in the expr.c file of the SQLite database management system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause service failures, memory leaks, or execute arbitrary code...

Apache Camel JIRA Java Framework Unauthorized Access

The vulnerability of the Apache Camel JIRA Java framework involves bypassing authentication using a user-controlled key. Exploiting this vulnerability can allow an intruder to gain unauthorized access to read, modify, add, and delete objects in the target JIRA system...

Oracle WebCenter Enterprise Capture Client Bundle Full Control

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker...

Oracle WebCenter Enterprise Capture Client Bundle Full Control

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker...

OpenWrt DHCPv6 DoS Execution Arbitrary Code

The vulnerability of the DHCPv6 server in the embedded operating system OpenWrt is related to buffer overflow in the stack. Exploiting this vulnerability can allow a remote attacker to cause service failures or execute arbitrary code...

Astro Framework isInternalPath Phishing

The vulnerability of the isInternalPath function in the web framework Astro relates to the redirection of URLs to unreliable websites. Exploiting this vulnerability could allow a remote attacker to carry out phishing attacks...

SQLite ExprListDelete Heap Buffer Overflow DoS

The vulnerability of the sqlite3ExprDelete function in the expr.c file of the SQLite database management system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to deny service, cause a memory leak, or execute arbitrary code...

Rclone RC-server Code Execution

The vulnerability of the RC-server of the cloud synchronization tool Rclone relates to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request to the operations/fsinfo endpoi...

Check Point Gaia Portal Privilege Escalation

The vulnerability in the Check Point Gaia Portal administrative web interface of the Gaia operating system is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to increase their privileges and gain full control over the device...