The vulnerability of the smp_execute_task_sg() function in the drivers/scsi/libsas/sas_expander.c driver of Linux’s SCSI device kernel exposes the confidentiality, integrity, and accessibility of protected information to attacks by attackers.

The vulnerability of the smpexecutetasksg function in the drivers/scsi/libsas/sasexpander.c file of the Linux SCSI device driver module is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the zpci_get_iommu_ctrs() function in the drivers/iommu/s390-iommu.c file of the Linux operating system’s IOMMU driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the zpcigetiommuctrs function in the drivers/iommu/s390-iommu.c module of the Linux operating system’s IOMMU driver is related to the execution of operations outside of memory buffers. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

The vulnerability of the iptunnel_pmtud_build_icmp() function in the net/ipv4/ip_tunnel_core.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iptunnelpmtudbuildicmp function in the net/ipv4/iptunnelcore.c module of the Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

The vulnerability of the rs9_regmap_i2c_read() function in the drivers/clk/clk-renesas-pcie.c file of the Linux operating system kernel driver for Samsung Exynos processors allows a hacker to cause a service failure.

The vulnerability of the rs9regmapi2cread function in the drivers/clk/clk-renesas-pcie.c file of the Linux operating system control chip for Samsung Exynos processors is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the h5_enqueue() function in the drivers/bluetooth/hci_h5.c driver module allows a hacker to trigger a service failure.

The vulnerability of the h5enqueue function in the drivers/bluetooth/hcih5.c driver for supporting Bluetooth devices in Linux operating systems is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the snd_ymfpci_memalloc() function in the sound/pci/ymfpci/ymfpci_main.c module of the Linux kernel’s audio subsystem allows a hacker to cause a service failure.

The vulnerability of the sndymfpcimemalloc function in the sound/pci/ymfpci/ymfpcimain.c module of the Linux kernel’s audio subsystem is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an...

The vulnerability of the process_got_section_contents function in the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the processgotsectioncontents function in the GNU Binutils development environment is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the lpfc_prep_embed_io() function in the drivers/scsi/lpfc/lpfc_sli.c module of the Linux operating system’s SCSI device support driver allows a hacker to cause a service failure.

The vulnerability of the lpfcprepembedio function in the drivers/scsi/lpfc/lpfcsli.c file of the Linux SCSI device support driver module is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the make_uffdwppte() function in the fs/proc/task_mmu.c module of the Linux kernel’s file system support module allows a attacker to cause a service failure.

The vulnerability of the makeuffdwppte function in the fs/proc/taskmmu.c module of the Linux kernel’s file system support module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the function iwl_mvm_mld_send_key() of the drivers/net/wireless/intel/iwlwifi/mvm/mld-key.c file of the Intel wireless network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iwlmvmmldsendkey function in the drivers/net/wireless/intel/iwlwifi/mvm/mld-key.c file of the Intel wireless driver for the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an...

The vulnerability of the segments_edid_read() function in the drivers/gpu/drm/bridge/analogix/anx7625.c driver code allows a hacker to cause a service failure in the Linux operating system’s Direct Rendering Infrastructure (DRI) kernel.

The vulnerability of the segmentsedidread function in the drivers/gpu/drm/bridge/analogix/anx7625.c driver code relates to the exposure of confidential information within the Linux kernel’s Direct Rendering Infrastructure DRI support mechanism. Exploiting this vulnerability could allow an attacke...

The vulnerability of the mt7996_rx_get_wcid() function in the drivers/net/wireless/mediatek/mt76/mt7996/mac.c module of the Mediatek wireless communication adapter driver for the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the mt7996rxgetwcid function in the drivers/net/wireless/mediatek/mt76/mt7996/mac.c module of the Mediatek wireless adapter driver in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker...

The vulnerability of the amdgpu_vram_mgr_new() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_vram_mgr.c driver module allows a hacker to cause a service failure in AMD GPU-based Linux operating system DRI (Direct Rendering Infrastructure) kernels.

The vulnerability of the amdgpuvrammgrnew function in the drivers/gpu/drm/amd/amdgpu/amdgpuvrammgr.c driver module related to AMD GPU cores in Linux operating systems is associated with synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to caus...

The vulnerability of the /goform/form2RepeaterStep2.cgi file of the goahead component of D-Link DIR-816 router software allows a hacker to execute arbitrary code.

The vulnerability of the /goform/form2RepeaterStep2.cgi file of the goahead component of the D-Link DIR-816 router microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability of the graph_util_parse_dai() function in the sound/soc/generic/simple-card-utils.c module of the Linux operating system’s SoC audio support module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the graphutilparsedai function in the sound/soc/generic/simple-card-utils.c module of the Linux operating system’s sound support module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability in the otx2remove() function of the drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c file of the Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the otx2remove function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2pf.c file of the Ethernet network adapter driver for the Marvell-based Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to compromise t...

The vulnerability of the raid_resume() function in the drivers/md/dm-raid.c module of the support for multiple device types (RAID and LVM) in the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the raidresume function in the drivers/md/dm-raid.c module of the Linux support for multiple device types RAID and LVM is related to the lack of checks to ensure that the value is within the minimum range. Exploiting this vulnerability could allow an attacker to cause a servi...

The vulnerability of the `btrfs_create_pending_block_groups()` function in the `fs/btrfs/block-group.c` file of the Linux kernel’s filesystem allows a attacker to cause a service failure.

The vulnerability of the btrfscreatependingblockgroups function in the fs/btrfs/block-group.c file of the Linux kernel’s filesystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the BPF_CALL_3() function in the net/core/filter.c module allows a hacker to trigger a service failure. This vulnerability is related to the support for kernel network functions in the Linux operating system.

The vulnerability of the BPFCALL3 function in the net/core/filter.c module related to Linux kernel network functions is associated with errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the riscv_kvm_exit() function in the arch/riscv/kvm/main.c module allows a hacker to trigger a service failure for processors with the RISCV architecture in the Linux operating system.

The vulnerability of the riscvkvmexit function in the arch/riscv/kvm/main.c module, which supports processors with the RISCV architecture in the Linux operating system, is related to code errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cifs_demultiplex_thread() function in the fs/smb/client/connect.c module, which is part of the SMB client support in Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the cifsdemultiplexthread function in the fs/smb/client/connect.c module, which is part of the SMB client support in Linux kernel, is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the function r535_gsp_postinit() of the drivers/gpu/drm/nouveau/nvkm/subdev/gsp/r535.c driver module allows a hacker to trigger a service failure. This vulnerability exposes the kernel of the Linux operating system’s Nouveau graphics driver to exploitation.

The vulnerability of the r535gsppostinit function in the drivers/gpu/drm/nouveau/nvkm/subdev/gsp/r535.c driver module relates to the Direct Rendering Infrastructure DRI support for NVIDIA graphics cards in the Linux operating system. This vulnerability involves the premature release of resources...

The vulnerability of the formSchedule() function in the /goform/formSchedule file of the boa software component for D-Link DIR-619L routers allows a hacker to execute arbitrary code.

The vulnerability of the formSchedule function in the /goform/formSchedule file of the boa microprogramming system for D-Link DIR-619L routers is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the ks8851_rx_pkts() function in the drivers/net/ethernet/micrel/ks8851_common.c file of the Ethernet adapter support driver for the Micrel kernel in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ks8851rxpkts function in the drivers/net/ethernet/micrel/ks8851common.c file of the Ethernet adapter support driver in the Micrel Linux kernel is related to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the qcom_qmpPhyCreate() function in the drivers/phy/qualcomm/phy-qcom-qmp.c driver module allows a hacker to cause a service failure.

The vulnerability of the qcomqmpPhyCreate function in the drivers/phy/qualcomm/phy-qcom-qmp.c file of the Linux kernel PHY support driver relates to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the DOMNode::C14N() method in the PHP programming language allows a hacker to trigger a denial-of-service attack.

The vulnerability of the DOMNode::C14N method in the PHP programming language is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the cl_stream_prepare() function in the sound module/soc/sof/intel/hda-loader.c code allows a hacker to cause a system failure in the Linux operating system’s SoC audio support.

The vulnerability of the clstreamprepare function in the sound module/soc/sof/intel/hda-loader.c, which is related to SoC-based Linux operating system sound support, involves a pointer manipulation issue. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the fuse_read_args_fill() function in the fs/fuse/file.c module, which supports the Linux file system, allows a hacker to cause a service failure.

The vulnerability of the fusereadargsfill function in the fs/fuse/file.c module of the Linux kernel’s file system support mechanism is related to incorrect input data validation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the fastrpc_req_mem_unmap_impl() function in the drivers/misc/fastrpc.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fastrpcreqmemunmapimpl function in the drivers/misc/fastrpc.c module of the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page from a remote location...

The vulnerability of the getTableSchemaSql() function in the LLM system, which allows attackers to execute arbitrary SQL commands.

The vulnerability of the getTableSchemaSql function in the large language model LLM running and management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

The vulnerability of the formwrlSSIDget() function (/goform/wifiSSIDget) in the Tenda i12 wireless access point software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the formwrlSSIDget function /goform/wifiSSIDget in the Tenda i12 wireless access point software is caused by a buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

The vulnerability of the `qsee_uefi_get_variable()` function in the `drivers/firmware/qcom/qcom_qseecom_uefisecapp.c` driver file, a Linux kernel-supported firmware driver, allows a hacker to cause a system failure.

The vulnerability of the qseeuefigetvariable function in the drivers/firmware/qcom/qcomqseecomuefisecapp.c driver code related to the Linux kernel-based firmware support module is due to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability could...

The vulnerability of the dpll_device_get_by_id() function in the drivers/dpll/dpll_core.c module of the DPLL kernel driver of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dplldevicegetbyid function in the drivers/dpll/dpllcore.c module of the DPLL kernel driver of the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the SCADA system Simple-Scada, related to the insecure storage of confidential information, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the SCADA system Simple-Scada is related to the insecure storage of confidential information. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the formwrlSSIDset() function in the Tenda W3 wireless access point software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formwrlSSIDset function in the Tenda W3 wireless access point software arises due to a buffer overflow on the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability in the frontend/src/utils/chat/markdown.js script of the LLM system’s launch and management framework, which allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability in the frontend/src/utils/chat/markdown.js script of the LLM system’s startup and management mechanism is related to insufficient protection of the web page structure. Exploiting this vulnerability could allow a malicious actor to perform XSS attacks across different websites...

The vulnerability of the ImportedPlugin.importCommunityItemFromUrl() function in the LLM system’s runtime and management framework allows a malicious actor to execute arbitrary code.

The vulnerability of the ImportedPlugin.importCommunityItemFromUrl function in the LLM system is related to an incorrect restriction on the path name of the catalog. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

The vulnerability of the __bio_release_pages() function in the block/bio.c module, which supports the block-level kernel in the Linux operating system. This vulnerability allows a attacker to cause a service failure.

The vulnerability of the bioreleasepages function in the block/bio.c module, which supports the block-level kernel in the Linux operating system, is related to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the formwrlSSIDget() function in the Tenda W3 wireless access point software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formwrlSSIDget function in the Tenda W3 wireless access point software is caused by a buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the __rb_map_vma() function in the kernel/trace/ring_buffer.c module, which supports Linux operating system kernel tracing, allows a hacker to cause a service failure.

The vulnerability of the rbmapvma function in the kernel/trace/ringbuffer.c module, which supports kernel tracing in Linux operating systems, is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the btf_name_valid_section() function in the kernel/bpf/btf.c module, which supports the BPF interpreter of the Linux operating system. This vulnerability allows an attacker to access protected information or cause a service failure.

The vulnerability of the btfnamevalidsection function in the kernel/bpf/btf.c module, which is part of the BPF interpreter support for the Linux operating system, involves reading beyond the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to access protected information...

The vulnerability in the fs/btrfs/inode.c module of the Linux operating system allows a hacker to gain access to and modify data.

The vulnerability in the fs/btrfs/inode.c module of the Linux operating system is related to the unlocking of a resource that should not be unlocked. Exploiting this vulnerability could allow an attacker to gain access to read and modify data...

The vulnerability in the built-in command-line interface (CLI) of the Jenkins automation server allows a attacker to execute a Cross-Site WebSocket Hijacking attack.

The vulnerability in the built-in command-line interface CLI of the Jenkins automation server is related to the dependence of critical actions on the reverse DNS solution. Exploiting this vulnerability allows a malicious actor to execute a Cross-Site WebSocket Hijacking attack remotely...

The vulnerability of the Jenkins automation server lies in the improper handling of symbolic links before accessing files. This allows attackers to write arbitrary files.

The vulnerability of the Jenkins automation server relates to the improper handling of symbolic links before accessing files during the extraction of .tar and .tar.gz archives. Exploiting this vulnerability allows a remote attacker to write arbitrary files...

The vulnerability of the LLM system for launching and managing large language models (LLM) allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of LLM-powered systems is related to configuration errors in CORS policies. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the developer tool “1C:ERP. Management of Holding Companies” relates to improper code generation, allowing attackers to execute arbitrary code.

The vulnerability of the developer tool “1C:ERP. Management of Holding Companies” is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the PHP library for generating PDF documents from HTML markup and CSS styles, Dompdf, allows attackers to disclose protected information.

The vulnerability of the PHP library for generating PDF documents from HTML markup and CSS styles, Dompdf, is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

The vulnerability of the formSetQosBand() function (/goform/SetNetControlList) in the Tenda AC21 router software allows a attacker to cause a service failure.

The vulnerability of the formSetQosBand function /goform/SetNetControlList of the Tenda AC21 router’s software lies in the fact that the operation’s output is stored outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure by sending a...

The vulnerability of the LoadNinja plugin in Jenkins automation servers, related to the storage of keys in an open manner, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the LoadNinja plugin in Jenkins automation servers lies in the storage of keys in an open manner within the config.xml file. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information...