The vulnerability of the FortiWeb web application’s network interface programming interface, related to stack-based buffer overflows, allows an attacker to execute arbitrary code.

The vulnerability of the FortiWeb web application’s network interface program interface is related to buffer overflow attacks based on stacks. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted HTTP requests...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to execute arbitrary code.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a malicious actor to...

The vulnerability of the reuseport_stop_listen_sock() function in the net/core/sock_reuseport.c module exposes support for network functions in the Linux kernel, allowing a hacker to trigger a service failure.

The vulnerability of the reuseportstoplistensock function in the net/core/sockreuseport.c module related to Linux kernel network functions is associated with synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the siw_proc_mpareply() function in the drivers/infiniband/sw/siw/siw_cm.c file of the Infiniband driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the siwprocmpareply function in the drivers/infiniband/sw/siw/siwcm.c module of the Infiniband driver for the Linux operating system is related to incorrect code handling of errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability in the adv7511_remove() function of the drivers/gpu/drm/bridge/adv7511/adv7511_drv.c driver for the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the adv7511remove function in the drivers/gpu/drm/bridge/adv7511/adv7511drv.c driver for the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to the assignment of pointers in a incorrect order after releasing a complex resource. Exploiting...

The vulnerability of Google Chrome and Microsoft Edge browsers’ CSS components allows attackers to trigger a service failure.

The vulnerability of Google Chrome and Microsoft Edge browsers’ CSS components is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

The vulnerability of the Adobe DNG Software Development Kit’s file reading and writing software lies in its integer overflow vulnerabilities, which allow attackers to trigger a service failure.

The vulnerability of the Adobe DNG Software Development Kit’s file reading and writing software is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created file...

The vulnerability of the `netfs_pgpriv2_begin_copy_to_cache()` function in the `fs/netfs/read_pgpriv2.c` module of the Linux kernel’s network file system support module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the netfspgpriv2begincopytocache function in the fs/netfs/readpgpriv2.c module of the Linux kernel’s network file system support module is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the mlx5e_rq_to_ready() function in the drivers/net/ethernet/mellanox/mlx5/core/en_main.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mlx5erqtoready function in the drivers/net/ethernet/mellanox/mlx5/core/enmain.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to the use of an incorrect resource. Exploiting this vulnerability could allow a attacker to caus...

The vulnerability of the spi_mem_calc_op_duration() function in the drivers/spi/spi-mem.c module of the Linux operating system’s SPI device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the spimemcalcopduration function in the drivers/spi/spi-mem.c file of the Linux operating system’s SPI device driver relates to a division by zero error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge relates to reading data beyond the permitted range in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially crafted HTML page...

The vulnerability of the Tint component in the Google Chrome browser allows a hacker to trigger a service failure.

The vulnerability of the Tint component in the Google Chrome browser is related to reading beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...

The vulnerability of the WebAssembly module of Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the WebAssembly module in Google Chrome and Microsoft Edge is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially crafted HTML page...

The vulnerability of the FortiMail email protection system, the FortiVoice corporate telephony software, and the FortiRecorder video surveillance device arises from the lack of encryption measures for protected data. This allows unauthorized individuals to gain unauthorized access to protected information.

The vulnerabilities of the FortiMail email protection system, the FortiVoice corporate telephony software, and the FortiRecorder video surveillance device are related to the lack of encryption measures for protected data. Exploiting these vulnerabilities can allow attackers to gain unauthorized...

The vulnerability of the Fortinet FortiManager software, which is used for centralized device management, and the Fortinet FortiAnalyzer software, which is used for event monitoring and analysis, lies in their susceptibility to being bypassed by an alternative authentication method or channel. This allows attackers to circumvent the multi-factor authentication checks.

The vulnerability of the Fortinet FortiManager software, which is used for centralized device management, and the Fortinet FortiAnalyzer software, which is used for event monitoring and analysis, relates to bypassing authentication by using an alternative path or channel. Exploiting this...

The vulnerability of Fortinet FortiWeb network firewalls lies in insufficient control over the frequency of interactions between devices. This allows attackers to circumvent the limit on the number of authentication attempts.

The vulnerability of Fortinet FortiWeb network firewalls is related to insufficient control over the frequency of interactions. Exploiting this vulnerability allows a malicious actor to circumvent the limit on the number of authentication attempts through specially crafted requests...

The vulnerability of the Fortinet FortiSandbox Cloud threat detection and mitigation system lies in its inability to neutralize certain elements used in the operating system’s command chain. This allows attackers to execute arbitrary code.

The vulnerability of the Fortinet FortiSandbox Cloud threat detection and mitigation system lies in the lack of measures taken to neutralize special elements used in the operating system. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially created HTTP...

The vulnerability of Flowise Cloud, a software platform for creating user interfaces based on Language Models (LLMs), allows a hacker to gain access to confidential information.

The vulnerability of Flowise Cloud, a software platform for creating user interfaces based on Language Models LLMs, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to confidential information...

The vulnerability of the `venus_helper_alloc_dpb_bufs()` function in the `drivers/media/platform/qcom/venus/helpers.c` file, a driver for supporting multimedia devices in the Linux operating system. This vulnerability allows an attacker to cause a service failure.

The vulnerability of the venushelperallocdpbbufs function in the drivers/media/platform/qcom/venus/helpers.c file, a driver for supporting multimedia devices in the Linux operating system, is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the rtsock_msg_buffer() function in the operating system kernel of FreeBSD, which allows a hacker to cause a service failure

The vulnerability of the rtsockmsgbuffer function in the kernel of the FreeBSD operating system is related to writing beyond the buffer’s memory boundaries. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the irdmaDestroy_cq() function in the drivers/infiniband/hw/irdma/verbs.c file of the Linux operating system’s kernel driver for InfiniBand allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the irdmaDestroycq function in the drivers/infiniband/hw/irdma/verbs.c module of the Linux kernel’s InfiniBand driver is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the `dw_pcie_ep_set_bar()` function in the drivers/pci/controller/dwc/pcie-designware-ep.c driver module allows a hacker to cause a service failure.

The vulnerability of the dwpcieepsetbar function in the drivers/pci/controller/dwc/pcie-designware-ep.c driver for Linux operating systems involves exposing confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the power_pmu_disable() function in the arch/powerpc/perf/core-book3s.c module of the PowerPC platform allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the powerpmudisable function in the arch/powerpc/perf/core-book3s.c module of the PowerPC platform supporting Linux operating systems is related to code errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...

The vulnerability of the `brcmfmac/pcie.c` function in the `driver/net/wireless/broadcom/brcm80211/brcmfmac` module of the Broadcom wireless adapter driver for Linux operating systems allows a hacker to cause a system failure.

The vulnerability of the brcmfpcieinitRingbuffers function in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/pcie.c file of the Broadcom wireless adapter driver in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an...

The vulnerability of the s390 kernel component of the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the s390 kernel component of the Linux operating system is related to the use of insufficiently random values. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s crypto kernel component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s crypto kernel component is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ring-buffer component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the ring-buffer component in the Linux operating system’s kernel is related to exception handling deficiencies. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the sched_ext component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the schedext component in the Linux operating system’s kernel is related to errors during thread blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the bpf component in the Linux operating system’s kernel allows a hacker to gain access to confidential data and also cause a service failure.

The vulnerability of the bpf component in the Linux operating system’s kernel is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service interruptions...

The vulnerabilities of the functions aq_nic_service_timer_cb() and aq_nic_get_stats() in the driver drivers/net/ethernet/aquantia/atlantic/aq_nic.c of the Ethernet network adapter driver for the aQuantia Atlantic chipset in the Linux operating system, which allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of the functions aqnicservicetimercb and aqnicgetstats in the driver/net/ethernet/aquantia/atlantic/aqnic.c file of the Ethernet network adapter driver for the aQuantia Atlantic chipset in the Linux operating system are related to unvalidated array indexing. Exploiting these...

The vulnerability in the __driver_attach() function of the drivers/base/dd.c module of the Linux kernel’s device drivers allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the driverattach function in the drivers/base/dd.c file of the Linux kernel’s device driver framework is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the parse_apply_sb_mount_options() function in the fs/ext4/super.c module of the Ext4 file system of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the parseapplysbmountoptions function in the fs/ext4/super.c module of the Ext4 file system in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could all...

The vulnerability of the CUPS Filters printing package lies in the possibility of a write-off operation going beyond the buffer boundaries in memory, allowing an attacker to cause a service failure.

The vulnerability of the CUPS Filters printing package relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `btrfs_get_dev_args_from_path()` function in the `fs/btrfs/volumes.c` module of the btrfs file system in the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the btrfsgetdevargsfrompath function in the fs/btrfs/volumes.c module of the btrfs file system in the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability in the capabilities_show() function of the drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dmdebugfs.c driver of the Direct Rendering Infrastructure (DRI) graphics card for the Linux operating system allows a attacker to cause a service failure.

The vulnerability in the capabilitiesshow function of the drivers/gpu/drm/amd/display/amdgpudm/amdgpudmdebugfs.c driver of the Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems is related to incorrect resource initialization. Exploiting this vulnerability can...

The vulnerabilities of the functions smb_send_parent_lease_break_noti() and smb_lazy_parent_lease_break_close() in the fs/smb/server/oplock.c module of the SMB server support module for Linux operating systems allow a hacker to trigger a service failure.

The vulnerabilities of the functions smbsendparentleasebreaknoti and smblazyparentleasebreakclose in the fs/smb/server/oplock.c module of the SMB server support module of the Linux operating system are related to errors during link counters updates. Exploiting these vulnerabilities can allow an...

The vulnerability in the `drivers/net/team/team_core.c` module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/net/team/teamcore.c module of the Linux operating system is related to insufficient locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `__sev_platform_init_locked()` function in the drivers/crypto/ccp/sev-dev.c file of the Linux kernel cryptographic accelerator driver allows a attacker to cause a service failure.

The vulnerability of the sevplatforminitlocked function in the drivers/crypto/ccp/sev-dev.c file of the Linux kernel cryptographic accelerator driver module involves access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the rtw89_set_sar_from_acpi() function in the driver/net/wireless/realtek/rtw89/sar.c file of the Realtek wireless adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rtw89setsarfromacpi function in the drivers/net/wireless/realtek/rtw89/sar.c file of the Realtek wireless adapter driver for the Linux operating system is related to improper locking of resources. Exploiting this vulnerability may allow an attacker to cause a service...

The vulnerabilities of the functions rxrpc_init_peer() and rxrpc_create_peer() in the net/rxrpc/peer_object.c module of the Linux operating system allow a hacker to cause a service failure.

The vulnerability of the functions rxrpcinitpeer and rxrpccreatepeer in the net/rxrpc/peerobject.c module of the Linux kernel is related to an incorrect interrupt call context. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the dm_dmub_outbox1_low_irq() function in the drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c driver module of the Direct Rendering Infrastructure (DRI) support driver for AMD graphics cards in Linux operating systems allows a attacker to cause a service failure.

The vulnerability of the dmdmuboutbox1lowirq function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudm.c driver for AMD graphics cards’ kernel-based Linux operating system is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the test_range{n}_rand{m}() functions in the security/landlock/id.c subsystem of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the testrangenrandm functions in the security/landlock/id.c subsystem of the Linux operating system’s kernel is related to insufficient input validation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the TrueConf Server software method allows for remote triggering of a service failure by deleting any arbitrary file.

The vulnerability of the TrueConf Server software lies in errors related to the mechanism for handling relative paths to the directory. Exploiting this vulnerability could allow an attacker to cause a service failure by deleting any arbitrary file...

The vulnerability of the sca3300_trigger_handler() function in the drivers/iio/accel/sca3300.c module of various types of embedded sensors in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the sca3300triggerhandler function in the drivers/iio/accel/sca3300.c module of various types of embedded sensors in the Linux operating system is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the send_ipi_data() function in the arch/loongarch/kvm/intc/ipi.c module, which is part of the LoongArch architecture support for the Linux operating system, allows a attacker to cause a service failure.

The vulnerability of the sendipidata function in the arch/loongarch/kvm/intc/ipi.c module, which is part of the LoongArch architecture support for the Linux operating system, relates to memory writing beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the iiodebugfs_write_reg() function in the drivers/iio/industrialio-core.c file of various types of embedded sensors in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the iiodebugfswritereg function in the drivers/iio/industrialio-core.c file of various types of embedded sensors in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the amdgpu_dpm_force_performance_level() function in the drivers/gpu/drm/amd/pm/amdgpu_dpm.c file of the Direct Rendering Infrastructure (DRI) driver for AMD graphics cards in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the amdgpudpmforceperformancelevel function in the drivers/gpu/drm/amd/pm/amdgpudpm.c file of the Direct Rendering Infrastructure DRI support driver for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow...

The vulnerability of the blkcg_iolatency_done_bio() function in the block/blk-iolatency.c module, which supports the block-level kernel in the Linux operating system, allows a attacker to cause a service failure.

The vulnerability of the blkcgiolatencydonebio function in the block/blk-iolatency.c module, which supports the block-level kernel in the Linux operating system, is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the TrueConf Server software method allows a perpetrator to initiate requests on behalf of the server.

The vulnerability of the TrueConf Server software lies in the insufficient protection of service data. Exploiting this vulnerability allows a malicious actor to initiate requests on behalf of the server remotely...

The vulnerabilities of the functions arch_dup_task_struct() and copy_thread() in the arch/s390/kernel/process.c module of the S390 platform support module of the Linux operating system allow a hacker to cause a service failure.

The vulnerability of the functions archduptaskstruct and copythread in the arch/s390/kernel/process.c module, which is part of the S390 platform support for the Linux operating system, relates to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker t...