The vulnerability of the MacOS operating system, related to incorrect path name restrictions for restricted access directories, allows attackers to elevate their privileges to the root level.

The vulnerability of the MacOS operating system is related to incorrect restrictions on path names in restricted access directories. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

The vulnerability of the MacOS operating system, related to errors with inherited permissions, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the MacOS operating system is related to errors with inherited permissions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Vulnerability of iOS and iPadOS operating systems, related to improper authentication, allows attackers to gain unauthorized access to protected information.

The vulnerability of iOS and iPadOS operating systems is related to improper authentication. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of the Safari browser on iOS, iPadOS, macOS operating systems is related to improper authorization, allowing attackers to gain access to the browser’s history.

The vulnerability of the Safari browser on iOS, iPadOS, and macOS systems is related to improper authentication. Exploiting this vulnerability can allow attackers to gain access to the browser’s history...

The vulnerability of the centralized network management system Cisco Catalyst SD-WAN Manager, due to deficiencies in authentication procedures, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the centralized network management system Cisco Catalyst SD-WAN Manager is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information by sending specially crafted...

The vulnerability of the `gem_get_ethtool_stats()` function in the `drivers/net/ethernet/cadence/macb_main.c` kernel module allows a attacker to compromise the integrity, confidentiality, and accessibility of the protected information.

The vulnerability of the gemgetethtoolstats function in the drivers/net/ethernet/cadence/macbmain.c file of the Linux kernel is related to writing beyond the valid memory range. Exploiting this vulnerability could allow an attacker to compromise the integrity, confidentiality, and accessibility o...

The vulnerability of the monitoring tool for VMware Aria Operations, related to the failure to take measures to neutralize specific elements, allows a perpetrator to execute arbitrary code.

The vulnerability of the monitoring tool for VMware Aria Operations relates to the failure to take measures to neutralize specific elements. Exploiting this vulnerability may allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the sk_stream_wait_memory() function in the net/core/stream.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the skstreamwaitmemory function in the net/core/stream.c module, which is part of the Linux kernel’s networking functions, relates to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the add_all_parents() function in the fs/btrfs/backref.c file of the btrfs file system in the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the addallparents function in the fs/btrfs/backref.c file of the btrfs file system in the Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the vmx_init() function in the arch/x86/kvm/vmx/vmx.c file of the virtualization subsystem on the x86 kernel-based Linux operating system allows a hacker to cause a service failure.

The vulnerability of the vmxinit function in the arch/x86/kvm/vmx/vmx.c file of the virtualization subsystem on the x86 kernel of the Linux operating system is related to the pointer swapping mechanism. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mceusb_gen1_init() function in the drivers/media/rc/mceusb.c file of the Linux kernel’s multimedia device driver allows a hacker to cause a service failure.

The vulnerability of the mceusbgen1init function in the drivers/media/rc/mceusb.c file of the Linux kernel’s multimedia device driver is related to data processing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the init_cache_level() function in the arch/arm64/kernel/cacheinfo.c module, which is part of the ARM 64-bit kernel support in the Linux operating system, allows a attacker to cause a service failure.

The vulnerability of the initcachelevel function in the arch/arm64/kernel/cacheinfo.c module, which is part of the ARM 64-bit kernel support for Linux operating systems, is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the AddMac function in the /cgi-bin/wireless.cgi script of the Wavlink router microprogramming system, which allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the AddMac function in the /cgi-bin/wireless.cgi script of the Wavlink WL-WN579A3 router software is related to the lack of data cleaning measures at the management level when processing the macAddr parameter. Exploiting this vulnerability allows an attacker to compromise the...

The vulnerability of the ftrace_startup() function in the kernel/trace/ftrace.c module, which is part of the Linux operating system’s tracing support, allows a malicious actor to cause a service failure.

The vulnerability of the ftracestartup function in the kernel/trace/ftrace.c module, which is part of Linux’s kernel-level tracing support, involves pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the btrfs DropExtents() function in the fs/btrfs/file.c file of the file system in Linux kernel allows a attacker to cause a service failure.

The vulnerability of the btrfs DropExtents function in the fs/btrfs/file.c file of the btrfs file system in Linux kernels is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the pvr2_hdw_create() function in the driver/media/usb/pvrusb2/pvrusb2-hdw.c file of the Linux operating system’s multimedia device driver, which allows a hacker to cause a service failure.

The vulnerability of the pvr2hdwcreate function in the drivers/media/usb/pvrusb2/pvrusb2-hdw.c file of the Linux operating system’s multimedia device driver framework is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the loop_set_status_from_info() function in the drivers/block/loop.c module of the Linux kernel’s block devices driver allows a attacker to cause a service failure.

The vulnerability of the loopsetstatusfrominfo function in the drivers/block/loop.c module of the Linux kernel’s block devices driver is related to the execution of operations outside of the memory buffer. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the amdgpu_bo_validate_size() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_object.c source file of the AMD GPU kernel for Linux’ Direct Rendering Infrastructure (DRI) driver architecture allows a attacker to cause a system failure.

The vulnerability of the amdgpubovalidatesize function in the drivers/gpu/drm/amd/amdgpu/amdgpuobject.c source file of the AMD GPU kernel for Linux Direct Rendering Infrastructure DRI driver architecture is related to the access to an uninitialized pointer. Exploiting this vulnerability could all...

The vulnerability of the nbd_start_device_ioctl() function in the drivers/block/nbd.c module of the Linux kernel’s block devices driver allows a attacker to cause a service failure.

The vulnerability of the nbdstartdeviceioctl function in the drivers/block/nbd.c module of the Linux kernel’s block devices driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mtk_vdec_worker() function in the drivers/media/platform/mediatek/vcodec/mtk_vcodec_dec_stateless.c driver for multimedia devices in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mtkvdecworker function in the drivers/media/platform/mediatek/vcodec/mtkvcodecdecstateless.c driver for multimedia devices in the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerabilities of functions exynos_ufs_shareability() and exynos_ufs_parse_dt() in the UFS-host controller support module drivers/ufs/host/ufs-exynos.c of the Linux operating system’s kernel allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of functions exynosufsshareability and exynosufsparsedt in the UFS-host controller support module drivers/ufs/host/ufs-exynos.c related to Linux kernel’s UFS Universal Flash Storage are due to improper disabling or release of resources. Exploiting these vulnerabilities could...

The vulnerabilities of the functions extAlloc() and extRecord() in the JFS file system module fs/jfs/jfs_extent.c of the Linux operating system’s kernel allow a hacker to cause a service failure.

The vulnerability of the extAlloc and extRecord functions in the JFS file system module fs/jfs/jfsextent.c of the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an...

The vulnerability of the ipvlan_l3s_unregister() function in the drivers/net/ipvlan/ipvlan_l3s.c module of the Linux kernel-based network device driver framework allows a attacker to cause a service failure.

The vulnerability of the ipvlanl3sunregister function in the drivers/net/ipvlan/ipvlanl3s.c module of the Linux kernel-based network device driver framework is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the centralized network management system of Cisco Catalyst SD-WAN Manager and the software for traffic management of Cisco Catalyst SD-WAN Controller, due to authentication mechanism flaws, allows attackers to gain unauthorized access to the system.

The vulnerability of the centralized network management system Cisco Catalyst SD-WAN Manager and the software for traffic management called Cisco Catalyst SD-WAN Controller is related to authentication mechanism flaws. Exploiting this vulnerability could allow an attacker to gain unauthorized...

The vulnerability of iOS, MacOS, and iPadOS operating systems, related to uncontrolled resource consumption, allows attackers to trigger service interruptions.

The vulnerabilities of iOS, MacOS, and iPadOS are related to uncontrolled resource consumption. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...

The vulnerability of TP-Link’s mobile applications stems from improper verification of certificate authenticity, allowing attackers to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of TP-Link mobile applications is related to improper verification of certificate authenticity. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the MacOS operating system, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure.

The vulnerability of the MacOS operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a hacker to cause service failures...

The vulnerability of the MacOS operating system, related to the disclosure of information through registration files, allows a perpetrator to gain unauthorized access to the protected location information.

The vulnerability of the MacOS operating system is related to the disclosure of information through registration files. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the protected location information...

The vulnerability of the MacOS operating system, related to insecure management of privileges, allows a perpetrator to elevate their privileges to the root level.

The vulnerability of the MacOS operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

The vulnerability of the MacOS operating system, related to the exposure of information, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the MacOS operating system is related to the exposure of information. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the ogs_gtp2_parse_tft function in the SMF component, which is used for creating and managing NR/LTE Open5GS mobile networks, allows a attacker to cause a service failure.

The vulnerability of the ogsgtp2parsetft function in the SMF component, which is used for creating and managing NR/LTE Open5GS mobile networks, is related to improper cleaning or release of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the centralized network management system Cisco Catalyst SD-WAN Manager, related to errors in the use of privileged application programming interfaces (APIs), allows a perpetrator to escalate their privileges.

The vulnerability of the centralized network management system, Cisco Catalyst SD-WAN Manager, is related to errors that occur when privileged application programming interfaces APIs are used. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the centralized network management system Cisco Catalyst SD-WAN Manager, related to insufficient protection of operational data, allows a hacker to disclose protected information.

The vulnerability of the centralized network management system, Cisco Catalyst SD-WAN Manager, is related to insufficient protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected by this system...

The vulnerability of the mlx5e_priv module’s structure in the drivers/net/ethernet/mellanox/mlx5/core/en.h file of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the mlx5epriv module’s drivers/net/ethernet/mellanox/mlx5/core/en.h file in the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerabilities of the functions sg_read() and sg_get_rq_mark() in the drivers/scsi/sg.c module of the Linux operating system’s SCSI device driver, which allow a hacker to cause a service failure.

The vulnerabilities of the functions sgread and sggetrqmark in the drivers/scsi/sg.c module of the Linux SCSI device driver are related to premature release of resources during their operation. Exploiting these vulnerabilities could allow an attacker to cause service failures...

The vulnerability of the set_machine_constraints() function in the drivers/regulator/core.c module of the Linux kernel’s voltage and current regulator driver allows a hacker to cause a service failure.

The vulnerability of the setmachineconstraints function in the drivers/regulator/core.c module of the Linux kernel’s voltage and current regulator driver is related to improper memory release „memory leak“. Exploiting this vulnerability could allow a attacker to cause a system failure...

The vulnerability of the rtas_os_term() function in the arch/powerpc/kernel/rtas.c module of the PowerPC platform’s Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rtasosterm function in the arch/powerpc/kernel/rtas.c module of the PowerPC platform support for the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the usb_reset_device() function in the drivers/usb/core/hub.c file of the Linux kernel’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the usbresetdevice function in the drivers/usb/core/hub.c file of the Linux kernel’s USB device driver module is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of function sub_406194 in the script /cgi-bin/adm.cgi of the wireless USB printer software Wavlink WL-NU516U1 allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of function sub406194 in the script /cgi-bin/adm.cgi of the wireless USB printer software Wavlink WL-NU516U1 is related to the output of operations that go beyond the buffer in memory when processing the firmwareurl parameter. Exploiting this vulnerability allows an attacker to...

The vulnerability of function sub_40785C in the script /cgi-bin/adm.cgi of the wireless USB printer software Wavlink WL-NU516U1 allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of function sub40785C in the /cgi-bin/adm.cgi script of the Wavlink WL-NU516U1 wireless USB printer software is related to the output of operations that go beyond the buffer in memory when processing the timezone parameter. Exploiting this vulnerability could allow an attacker t...

Vulnerability of the MarkdownRenderer.jsx component in large language models (LLMs). A new API that allows attackers to perform cross-site scripting attacks.

The vulnerability of the MarkdownRenderer.jsx component in large language models LLMs is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform XSS attacks remotely...

The vulnerability of the AI-based training platform OpenSift, related to the lack of measures taken to protect the structure of web pages, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the OpenSift AI training automation platform relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the online service for managing laundry services, related to the manipulation of cross-site requests, allows a perpetrator to carry out a CSRF attack.

The vulnerability of the online service for managing laundry services is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

The vulnerability of the rcu_assign_sk_user_data_nocopy() macro definition in the include/net/sock.h file, which is part of the networking function support in the Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the rcuassignskuserdatanocopy macro definition in the include/net/sock.h file, which is part of the Linux kernel’s networking support functions, is related to errors during the update of the reference counters. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerabilities of the functions cnl_ipc4_irq_thread() and cnl_ipc_irq_thread() in the sound/soc/sof/intel/cnl.c module, which are part of the Linux SoC audio support, allow a malicious actor to cause system failures.

The vulnerability of the functions cnlipc4irqthread and cnlipcirqthread in the sound/soc/sof/intel/cnl.c module, which is part of the Linux SoC audio support, relates to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the ext2_setsize() function in the fs/ext2/inode.c module of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext2setsize function in the fs/ext2/inode.c module of the Linux kernel file system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the msm_dsi_modeset_init() function in the driver/gpu/drm/msm/dsi/dsi.c file of the Direct Rendering Infrastructure (DRI) driver in the Linux operating system’s kernel allows a malicious actor to cause a service failure.

The vulnerability of the msmdsimodesetinit function in the driver/gpu/drm/msm/dsi/dsi.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the qm_get_qos_value() function in the drivers/crypto/hisilicon/qm.c module of the Linux kernel cryptographic accelerator driver allows a hacker to cause a service failure.

The vulnerability of the qmgetqosvalue function in the drivers/crypto/hisilicon/qm.c module of the Linux kernel’s cryptographic accelerator driver is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the niu_try_msix() function in the drivers/net/ethernet/sun/niu.c module of the Linux kernel’s Ethernet network adapter support driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the niutrymsix function in the drivers/net/ethernet/sun/niu.c module of the Linux kernel’s Ethernet adapter support driver is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the jfs_truncate_nolock() function in the fs/jfs/inode.c file of the JFS file system in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the jfstruncatenolock function in the fs/jfs/inode.c file of the JFS file system in Linux kernel is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause a service failure...