92550 matches found
The vulnerability of the sja1105_setup_devlink_regions() function in the drivers/net/dsa/sja1105/sja1105_devlink.c file of the NXP SJA1105 series switch driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the sja1105setupdevlinkregions function in the drivers/net/dsa/sja1105/sja1105devlink.c file of the NXP SJA1105 series switch driver for the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attac...
The vulnerability of the pgAdmin 4 database management tool, related to access control errors, allows attackers to execute arbitrary commands.
The vulnerability of the pgAdmin 4 database management tool is related to access control errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
The vulnerability of the rxrpc_send_data() function in the net/rxrpc/sendmsg.c module, which is part of the RxRPC session socket support in the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the rxrpcsenddata function in the net/rxrpc/sendmsg.c module, which supports RxRPC session sockets in Linux operating systems, is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the qcom_mhi_qrtr_probe() function in the net/qrtr/mhi.c module, which is part of the Qualcomm IPC router support for Linux operating systems, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the qcommhiqrtrprobe function in the net/qrtr/mhi.c module, which is part of the Qualcomm IPC router support in the Linux operating system, is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to compromise th...
The vulnerability of the Vim text editor, related to buffer overflow in dynamic memory, allows attackers to cause a service failure.
The vulnerability of the Vim text editor is related to overflowing the buffer in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the usb_read8() function in the drivers/staging/rtl8712/usb_ops.c module allows a hacker to cause a service failure within the Linux operating system.
The vulnerability of the usbread8 function in the drivers/staging/rtl8712/usbops.c module, which supports additional devices in the Linux operating system, is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the sa1100_set_termios() function in the drivers/tty/serial/sa1100.c file of the console support driver for the TTY serial port in the Linux operating system allows a malicious actor to cause a service failure.
The vulnerability of the sa1100settermios function in the drivers/tty/serial/sa1100.c file, a driver for supporting TTY consoles on the serial port of the Linux kernel, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Access Control web interface module in IP-telephony systems like FreePBX allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Access Control web interface module in IP-telephony systems like FreePBX allows attackers to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the Vim text editor, related to reading beyond the buffer in memory, allows a hacker to trigger a service failure.
The vulnerability of the Vim text editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the xdr_stream_decode_uint32_array() function in the include/linux/sunrpc/xdr.h module of the Linux kernel allows a attacker to cause a service failure.
The vulnerability of the xdrstreamdecodeuint32array function in the include/linux/sunrpc/xdr.h module of the Linux kernel is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the r871xu_drv_init() function in the drivers/staging/rtl8712/usb_intf.c module, which supports additional devices in the Linux operating system, allows a hacker to cause a service failure.
The vulnerability of the r871xudrvinit function in the drivers/staging/rtl8712/usbintf.c module, which supports additional devices in the Linux operating system, is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the oxu_bus_suspend() function in the drivers/usb/host/oxu210hp-hcd.c driver for supporting USB device controllers in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the oxubussuspend function in the drivers/usb/host/oxu210hp-hcd.c file of the Linux device support driver module is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the mips_cpc_default_phys_base() function in the arch/mips/kernel/mips-cpc.c module of the Linux operating system’s MIPS architecture support module allows a attacker to cause a service failure.
The vulnerability of the mipscpcdefaultphysbase function in the arch/mips/kernel/mips-cpc.c module of the Linux operating system’s MIPS architecture support module is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of TP-Link Tapo H200 and Tapo P100 devices’ microprogramming software lies in the improper verification of certificate authenticity. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of TP-Link Tapo H200 and Tapo P100 devices’ microprogramming software is related to improper verification of the certificate’s authenticity. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the `zynqmp_dma_alloc_chan_resources()` function in the `drivers/dma/xilinx/zynqmp_dma.c` file of the Linux kernel’s DMA driver module allows a attacker to cause a service failure.
The vulnerability of the zynqmpdmaallocchanResources function in the drivers/dma/xilinx/zynqmpdma.c driver module of the Linux kernel’s DMA driver framework is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...
The vulnerability of the ext4_ext_migrate() function in the fs/ext4/migrate.c file of the Ext4 file system in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the ext4extmigrate function in the fs/ext4/migrate.c file of the Ext4 file system in the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a attacker to cause a service failure...
The vulnerability of Cisco TelePresence CE and RoomOS software, related to improper validation of certain types of input data, allows a intruder to trigger a service failure.
The vulnerability of Cisco TelePresence CE and RoomOS software is related to improper validation of certain types of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the plugin for Docker Desktop Docker Model Runner, related to the use of dangerous methods or functions, allows a perpetrator to cause service failures.
The vulnerability of the plugin for Docker Desktop Docker Model Runner is related to the use of dangerous methods or functions. Exploiting this vulnerability may allow a attacker to cause service failures...
The vulnerability of the `make_indexed_dir()` function in the `fs/ext4/namei.c` file of the Ext4 file system’s kernel in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the makeindexeddir function in the fs/ext4/namei.c file of the Ext4 file system in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the btrfs_quota_enable() function in the fs/btrfs/qgroup.c module of the file system support module for Linux kernel allows a malicious actor to trigger a service failure.
The vulnerability of the btrfsquotaenable function in the fs/btrfs/qgroup.c module of the file system support for the Linux operating system is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause a service failur...
The vulnerability of the setIptvCfg handler in the /usr/sbin/lighttpd executable file of the TOTOLINK X5000R router microprogramming system allows a attacker to execute arbitrary commands.
The vulnerability of the setIptvCfg handler in the /usr/sbin/lighttpd executable file of the TOTOLINK X5000R router microprogramming system exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a...
The vulnerability of the dst_count_dec() function in the net/core/dst.c module, a support for network functions in the Linux kernel, allows a hacker to cause a service failure.
The vulnerability of the dstcountdec function in the net/core/dst.c module, part of the Linux kernel’s networking functions support, involves disclosing confidential information. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the Gimp image processing library, related to writing beyond the buffer boundaries, allows a hacker to execute arbitrary code.
The vulnerability of the Gimp image processing library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the memory_info_update() function in the sound/soc/sof/debug.c module of the Linux operating system’s SoC audio support module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the memoryinfoupdate function in the sound/soc/sof/debug.c module related to the Linux operating system’s SoC audio support involves copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an...
The vulnerability in the sanity_check inode() function of the fs/f2fs/inode.c module of the F2FS file system support in the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the sanitycheck inode function in the fs/f2fs/inode.c module of the F2FS file system support in the Linux operating system is related to code errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the build_sit_entries() function in the fs/f2fs/segment.c module of the F2FS file system support in Linux kernel allows a attacker to cause a service failure.
The vulnerability of the buildsitentries function in the fs/f2fs/segment.c module of the F2FS file system support in Linux kernel allows for the exploitation of resources without any restrictions or regulation. Exploiting this vulnerability can enable a hacker to cause service failures...
The vulnerability of the calibrate_ccount() function in the arch/xtensa/kernel/time.c module of the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the calibrateccount function in the arch/xtensa/kernel/time.c module of the Linux operating system’s kernel is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the btrfs_init_devices_late() function in the fs/btrfs/volumes.c file of the Linux kernel’s file system allows a hacker to cause a service failure.
The vulnerability of the btrfsinitdeviceslate function in the fs/btrfs/volumes.c file of the Linux kernel’s file system is related to the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the setWebWlanIdx function in the microprogrammed software of TOTOLINK N300RH allows a perpetrator to execute arbitrary commands.
The vulnerability of the setWebWlanIdx function in the microprogrammed software of TOTOLINK N300RH routers is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the function ice_xsk_pool_setup() in the driver drivers/net/ethernet/intel/ice/ice_xsk.c of the Intel Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the function icexskpoolsetup in the driver module drivers/net/ethernet/intel/ice/icexsk.c of the Intel Ethernet network adapter driver for the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the p9_fd_open() function in the net/9p/trans_fd.c module of the 9P protocol implementation in Linux’s operating system allows a hacker to cause a service failure.
The vulnerability of the p9fdopen function in the net/9p/transfd.c module of the 9P protocol implementation in Linux’s operating system is related to uncontrolled use of file descriptors. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Vim text editor, related to reading beyond the buffer in memory, allows attackers to compromise the accessibility of the protected information.
The vulnerability of the Vim text editor is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the accessibility of the protected information...
The vulnerability of the Vim text editor, related to the lack of measures to neutralize special elements, allows a hacker to execute arbitrary commands.
The vulnerability of the Vim text editor is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
The vulnerability of the Python library for working with PDF files, PyPDF, related to uncontrolled resource consumption, allows attackers to compromise the accessibility of protected information.
The vulnerability of the Python library for working with PDF files, PyPDF, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to compromise the accessibility of protected information...
The vulnerability of the `netfs_unbuffered_write_iter_locked()` function in the `fs/netfs/direct_write.c` module, which is part of the Linux kernel’s network file system support, allows a hacker to cause a service failure.
The vulnerability of the netfsunbufferedwriteiterlocked function in the fs/netfs/directwrite.c module, which is part of the Linux kernel’s network file system support, involves copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...
The vulnerability of the machine_kexec() function in the arch/x86/kernel/machine_kexec_64.c module, which is part of the Linux operating system’s x86 kernel support, allows a hacker to cause a service failure.
The vulnerability of the machinekexec function in the arch/x86/kernel/machinekexec64.c module of the Linux kernel support for x86 processors is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the SSH library wolfSSH, related to deficiencies in authentication procedures, allows attackers to circumvent existing security restrictions.
The vulnerability of the SSH library wolfSSH is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...
The vulnerability of the vt8623fb_set_par() function in the drivers/video/fbdev/vt8623fb.c driver for kernel video devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the vt8623fbsetpar function in the drivers/video/fbdev/vt8623fb.c driver for kernel-based graphics buffer devices in the Linux operating system is related to the execution of operations beyond the buffer’s memory boundaries. Exploiting this vulnerability could allow a remote...
The vulnerability of the pci_dev_lock() function in the drivers/pci/pci.c module of the Linux operating system’s device support driver allows a hacker to cause a service failure.
The vulnerability of the pcidevlock function in the drivers/pci/pci.c module of the Linux operating system’s device support driver for PCI devices is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the nf_flow_table_free() function in the kernel module net/netfilter/nf_flow_table_core.c of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the nfflowtablefree function in the kernel module net/netfilter/nfflowtablecore.c of the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity,...
The vulnerability of the hda_dsp_dump_ext_rom_status() function in the sound/soc/sof/intel/hda.c module, which is part of the Linux SoC audio support, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the hdadspdumpextromstatus function in the sound/soc/sof/intel/hda.c module, which is part of the Linux SoC audio support, involves copying buffers without checking their size—a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromis...
The vulnerability of the `early_init_devtree()` function in the `arch/powerpc/kernel/prom.c` file, which is part of the PowerPC platform support for the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the earlyinitdevtree function in the arch/powerpc/kernel/prom.c file, which is part of the PowerPC platform support for the Linux operating system, is related to code errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...
The vulnerability of the WSO2 platform for integrating application programming interfaces, applications, and web services stems from incorrect restrictions on XML links to external objects. This allows attackers to carry out XXE attacks.
The vulnerability of the WSO2 platform for integrating application programming interfaces, applications, and web services is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a malicious actor to perform XXE attacks remotely...
The vulnerability of the __is_bitmap_valid() function in the fs/f2fs/checkpoint.c module of the F2FS file system support in Linux’s operating system allows a malicious actor to trigger a service failure.
The vulnerability of the isbitmapvalid function in the fs/f2fs/checkpoint.c module of the F2FS file system support in Linux’s operating system is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to trigger a service failure...
The vulnerability of the user_dlmdestroy_lock() function in the fs/ocfs2/dlmfs/userdlm.c module of the OCFS2 file system support in the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the userdlmdestroylock function in the fs/ocfs2/dlmfs/userdlm.c module of the OCFS2 file system support in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the f2fs_evict inode() function in the fs/f2fs/inode.c module of the F2FS file system support in Linux’s kernel allows a attacker to cause a service failure.
The vulnerability of the f2fsevict inode function in the fs/f2fs/inode.c module of the F2FS file system support in Linux operating systems is related to data processing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the enter_rtas() function in the arch/powerpc/kernel/rtas.c module, which is part of the PowerPC platform support for the Linux operating system, allows a hacker to trigger a service failure.
The vulnerability of the enterrtas function in the arch/powerpc/kernel/rtas.c module of the Linux operating system’s PowerPC kernel is related to an uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerabilities of the functions p9_conn Cancel() and p9_read_work() in the net/9p/trans_fd.c module of the 9P protocol implementation in the Linux operating system allow a hacker to cause a service failure.
The vulnerabilities of the functions p9conn Cancel and p9readwork in the net/9p/transfd.c module of the 9P protocol implementation in the Linux operating system are related to the distribution of resources without any restrictions or regulations. Exploiting these vulnerabilities could allow a...
The vulnerability of the gfs2_check_sb() function in the fs/gfs2/ops_fstype.c file of the GFS2 file system in the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the gfs2checksb function in the fs/gfs2/opsfstype.c file of the GFS2 file system in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the icom_probe() function in the drivers/tty/serial/icom.c module of the console support driver for the TTY serial port in the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the icomprobe function in the drivers/tty/serial/icom.c module of the console support driver for the TTY serial port in the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a...