92550 matches found
The vulnerability of the ntfsattr_find() function in the fs/ntfs/attrib.c file of the Linux kernel-based file system allows a attacker to cause a service failure.
The vulnerability of the ntfsattrfind function in the fs/ntfs/attrib.c file of the Linux kernel-based file system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerabilities of the functions iforce_serio_xmit() and iforce_serio_irq() in the driver/drivers/input/joystick/iforce/iforce-serio.c of the Linux operating system’s input device drivers allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerabilities of the functions iforceserioxmit and iforceserioirq in the driver module drivers/input/joystick/iforce/iforce-serio.c of the Linux operating system’s input device drivers are related to an infinite waiting loop for resources. Exploiting these vulnerabilities could allow a remo...
The vulnerability of the create_subvol() function in the fs/btrfs/ioctl.c module of the file system support library for Linux’s kernel allows a hacker to cause a service failure.
The vulnerability of the createsubvol function in the fs/btrfs/ioctl.c module of the file system support for the Linux operating system is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the NTPSyncWithHost handler in the /usr/sbin/shttpd executable of the TOTOLINK X6000R router software, allowing a attacker to execute arbitrary commands.
The vulnerability of the NTPSyncWithHost handler in the /usr/sbin/shttpd executable of the X6000R router microprogramming system exists due to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to...
The vulnerability in the virtualization subsystem’s arch/x86/kvm/mmu.c module on the Linux operating system’s x86 kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability in the arch/x86/kvm/mmu.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...
The vulnerability of the `alloc_quote_buf()` function in the drivers/virt/coco/tdx-guest/tdx-guest.c file of the Linux kernel allows a hacker to gain unauthorized access to protected information.
The vulnerability of the allocquotebuf function in the drivers/virt/coco/tdx-guest/tdx-guest.c file of the Linux kernel is related to errors in handling exceptional conditions. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information...
The vulnerability of the iso_listen_bis() function in the net/bluetooth/iso.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to cause a service failure.
The vulnerability of the isolistenbis function in the net/bluetooth/iso.c module of the Linux kernel’s Bluetooth subsystem is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the nfsd_proc_write() function in the fs/nfsd/nfsproc.c module, which is part of the NFS network file system support in Linux kernel, allows a attacker to cause a service failure.
The vulnerability of the nfsdprocwrite function in the fs/nfsd/nfsproc.c module, which is part of the NFS network file system support in Linux kernels, is related to code errors. Exploiting this vulnerability could allow an attacker to cause service failures...
Vulnerability of the do_journal_discard() function in the drivers/md/bcache/journal.c module – A driver for supporting multiple device types (RAID and LVM) in the Linux kernel, which allows a hacker to trigger a service failure.
Vulnerability of the dojournaldiscard function in the drivers/md/bcache/journal.c module – The driver for supporting multiple devices RAID and LVM in the Linux kernel is vulnerable to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause...
The vulnerability of the jz4740_mmc_acquire_dma_channels() function in the drivers/mmc/host/jz4740_mmc.c module of the MMC/SD/SDIO card support driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the jz4740mmcacquiredmachannels function in the drivers/mmc/host/jz4740mmc.c module of the MMC/SD/SDIO card support driver for the Linux operating system is related to a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker to cause a service...
Vulnerability of the ath11k_spectral_scan_config() function in the drivers/net/wireless/ath/ath11k/spectral.c module – A driver for Atheros/Qualcomm wireless adapter support in the Linux operating system, which allows a hacker to cause a service failure
The vulnerability of the ath11kspectralscanconfig function in the drivers/net/wireless/ath/ath11k/spectral.c module – the driver for Atheros/Qualcomm wireless adapter support in Linux operating systems – is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow a...
The vulnerability of the hda_dai_get_ops() function in the sound/soc/sof/intel/hda-dai.c module allows a hacker to cause a service failure in the Linux operating system’s SoC-based audio kernel.
The vulnerability of the hdadaigetops function in the sound/soc/sof/intel/hda-dai.c module of the Linux audio support module for SoC cores is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the adf7242_remove() function in the drivers/net/ieee802154/adf7242.c file of the Linux kernel’s network device driver allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the adf7242remove function in the drivers/net/ieee802154/adf7242.c file of the Linux kernel’s network device driver is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...
The vulnerability of the sun6i_dsi_setup_timings() function in the drivers/gpu/drm/sun4i/sun6i_mipi_dsi.c file of the Linux Direct Rendering Infrastructure (DRI) driver architecture allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the sun6idsisetuptimings function in the drivers/gpu/drm/sun4i/sun6imipidsi.c file of the Linux Direct Rendering Infrastructure driver architecture is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker t...
The vulnerability of the NVUE interface in NVIDIA Cumulus Linux and Operating System (NVOS) operating systems allows attackers to increase their privileges.
The vulnerability of the NVUE interface in NVIDIA Cumulus Linux and Operating System NVOS systems is related to privilege assignment errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
The vulnerability of ClamBC, a byte-code interpreter in the ClamAV antivirus software, allows a perpetrator to execute arbitrary code or cause a service failure.
The vulnerability of the byte-code interpreter in the ClamAV antivirus software package ClamBC is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause system failures...
The vulnerability of Moxa industrial computers lies in the transmission of critical information in plaintext, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of Moxa industrial computers lies in the transmission of critical information in plaintext. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...
Vulnerability of the libipw_xmit() function in the drivers/net/wireless/intel/ipw2x00/libipw_tx.c file – This driver is part of the Linux operating system’s wireless adapter support drivers, which allows a hacker to cause a service failure.
Vulnerability of the libipwxmit function in the drivers/net/wireless/intel/ipw2x00/libipwtx.c file – The Linux kernel’s wireless adapter support driver is vulnerable due to a NULL pointer dereferencing issue. Exploiting this vulnerability could allow an attacker to cause a system failure...
Vulnerability of the function pmac_cpufreq_init_MacRISC3(), from the file drivers/cpufreq/pmac32-cpufreq.c – a driver for scaling CPU frequencies in Linux operating systems. This vulnerability allows a hacker to cause a system failure.
The vulnerability of the function pmaccpufreqinitMacRISC3 in the driver/cpufreq/pmac32-cpufreq.c module is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the l2tp_ip6_sendmsg() function in the net/l2tp/l2tp_ip6.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.
The vulnerability of the l2tpip6sendmsg function in the net/l2tp/l2tpip6.c module, which implements networking functions for the Linux kernel, is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the nfcmrvl_play_deferred() function in the drivers/nfc/nfcmrvl/usb.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the nfcmrvlplaydeferred function in the drivers/nfc/nfcmrvl/usb.c module of the Linux kernel is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the kcm_attach() function in the net/kcm/kcmsock.c module, which is part of the Linux kernel’s networking functions, allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the kcmattach function in the net/kcm/kcmsock.c module, which implements networking functions for the Linux operating system’s kernel, is related to improper initialization. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...
The vulnerability of the JwtAuthenticator component in the authentication and authorization library pac4j-jwt allows a perpetrator to circumvent existing security restrictions.
The vulnerability of the JwtAuthenticator component in the authentication and authorization library pac4j-jwt is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions by sending speciall...
The vulnerability of the NVUE interface in NVIDIA Cumulus Linux and Operating System (NVOS) operating systems allows attackers to increase their privileges.
The vulnerability of the NVUE interface in NVIDIA Cumulus Linux and Operating System NVOS systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
The vulnerability of the microprogrammed software of the WiFi router ZBT (Shenzhen Zhibotong Electronics) WE2001, related to incorrect restrictions on the path name to the directory, allows a intruder to gain unauthorized access and delete protected information.
The vulnerability of the microprogrammed software of the WiFi router ZBT Shenzhen Zhibotong Electronics WE2001 is related to incorrect restrictions on the path name to the directory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access and delete...
The vulnerability of the diag_command.php component of the Netgate pfSense software, which allows a hacker to read arbitrary files.
The vulnerability of the diagcommand.php component of the Netgate pfSense software firewall is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a remote attacker to read arbitrary files...
The vulnerability of the nft_tproxy_dump() function in the net/netfilter/nft_tproxy.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the nfttproxydump function in the net/netfilter/nfttproxy.c module of the netfilter component of the Linux operating system is related to the use of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of Moxa industrial computers lies in the insufficient protection of registration data, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of Moxa industrial computers lies in the insufficient protection of registration data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability in the isp116xremove() function of the drivers/usb/host/isp116x-hcd.c driver module allows a malicious actor to cause a service failure.
The vulnerability of the isp116xremove function in the drivers/usb/host/isp116x-hcd.c file of the Linux kernel’s USB device support driver is related to the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the snd_usbmidiOutputOpen() function in the sound/usb/midi.c module of Linux’s USB audio device support allows a hacker to cause a service failure.
The vulnerability of the sndusbmidioutputopen function in the sound/usb/midi.c module, which is part of Linux’s USB audio device support, involves unconstrained and unrestricted resource allocation. Exploiting this vulnerability could allow a hacker to cause service failures...
The vulnerability of the cmd_hdl_filter() function in the drivers/staging/rtl8712/rtl8712_cmd.c module, which supports additional devices of the Linux operating system, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the cmdhdlfilter function in the drivers/staging/rtl8712/rtl8712cmd.c file, which supports additional devices in the Linux operating system, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise t...
The vulnerability of the mv88e6060_setup_port() function in the drivers/net/dsa/mv88e6060.c file of the DSA kernel driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the mv88e6060setupport function in the drivers/net/dsa/mv88e6060.c file of the Linux DSA kernel driver is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of th...
The vulnerability of the `gpio_fan_set_cur_state()` function in the `drivers/hwmon/gpio-fan.c` file of the Linux operating system’s hardware monitoring driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the gpiofansetcurstate function in the drivers/hwmon/gpio-fan.c file of the Linux kernel device monitoring driver is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of the `cdns3_wa2_remove_old_request()` function in the `drivers/usb/cdns3/cdns3-gadget.c` driver for USB device drivers in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the cdns3wa2removeoldrequest function in the drivers/usb/cdns3/cdns3-gadget.c device driver of the Linux operating system’s USB device driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerabilities of the functions iavf_init_asq() and iavf_init_arq() in the driver drivers/net/ethernet/intel/iavf/iavf_adminq.c of the Intel Ethernet network adapter driver for the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerabilities of the functions iavfinitasq and iavfinitarq in the file drivers/net/ethernet/intel/iavf/iavfadminq.c of the Intel Ethernet network adapter driver for the Linux operating system are related to a memory leak. Exploiting these vulnerabilities could allow an attacker to compromis...
The vulnerability of the fastrpc_cb_probe() function in the drivers/misc/fastrpc.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the fastrpccbprobe function in the drivers/misc/fastrpc.c module of the Linux kernel is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the console-based graphic editor ImageMagick, related to reading beyond the buffer limit of memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the console-based graphic editor ImageMagick is related to reading data beyond the buffer limit of memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the console-based graphic editor ImageMagick, related to buffer overflow in dynamic memory, allows attackers to compromise the integrity and accessibility of the protected information.
The vulnerability of the console-based graphic editor ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to compromise the integrity and accessibility of the protected information...
The vulnerability of the ip6_find_1stfragopt() function in the include/net/ipv6.h module of the Linux kernel allows a hacker to induce a service failure.
The vulnerability of the ip6find1stfragopt function in the include/net/ipv6.h module of the Linux kernel is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerabilities of the functions cifs_abort_connection() and generic_ip_connect() in the Linux operating system allow a hacker to cause a service failure.
The vulnerability of the cifsabortconnection and genericipconnect functions in the Linux kernel is related to the lack of memory release after the effective lifespan of these functions has ended. Exploiting this vulnerability could allow a remote attacker to cause service failures...
The vulnerability of the sun50i_cpufreq_get_efuse() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the sun50icpufreqgetefuse function in the Linux operating system is related to reading data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the tegra241cmdqv_init_structures() function in the drivers/iommu/arm/arm-smmu-v3/tegra241-cmdqv.c file of the Linux operating system’s IOMMU kernel driver allows a attacker to cause a service failure.
The vulnerability of the tegra241cmdqvinitstructures function in the drivers/iommu/arm/arm-smmu-v3/tegra241-cmdqv.c file of the Linux operating system’s IOMMU kernel is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a...
The vulnerability of the /goform/set_ac_status function in D-link DIR-823X router microprogramming software allows a hacker to execute arbitrary commands.
The vulnerability of the /goform/setacstatus function in D-link DIR-823X router microprogramming software is related to the failure to eliminate special elements during the processing of parameters acipaddr/acipstatus/aprandtime. Exploiting this vulnerability allows a remote attacker to execute...
The vulnerability of the sub_432580 function (/goform/fastetting_wifi_set) in the microprogramming software for Tenda TX9 Pro allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sub432580 /goform/fastsettingwifiset function in the microprogramming software for Tenda TX9 Pro relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the addAuthUser function (goform/formAddWebAuthUse) in the Tenda W20E router software allows a hacker to execute arbitrary commands.
The vulnerability of the addAuthUser function goform/formAddWebAuthUse in the Tenda W20E router microprogramming system lies in the fact that the operation’s output escapes the buffer and is stored in the userInfo parameter’s memory. Exploiting this vulnerability allows a remote attacker to execu...
The vulnerability of the qla2x00_create_host() function in the drivers/scsi/qla2xxx/qla_os.c driver module of the Linux SCSI device kernel allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the qla2x00createhost function in the drivers/scsi/qla2xxx/qlaos.c driver for Linux SCSI devices is related to the occurrence of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the recovery_request_write() function in the drivers/md/raid10.c module of the Linux operating system’s multi-device driver (RAID and LVM kernel), which allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the recoveryrequestwrite function in the drivers/md/raid10.c driver for multiple device-based systems RAID and LVM in the Linux kernel is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker t...
The vulnerability of the adv_routing.php implementation of the Web Configuration Interface component of the D-Link DIR-615 router software allows a hacker to execute arbitrary code.
The vulnerability of the advrouting.php implementation of the Web Configuration Interface component of the D-Link DIR-615 router microprogramming system is related to the failure to take measures to neutralize special elements used in the operating system’s command when processing the...
The vulnerability of the sub_419920 (/boafrm/formLtefotaUpgradeQuectel) function in the DWR-M921 router microprogramming software allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the sub419920 /boafrm/formLtefotaUpgradeQuectel function in the DWR-M921 router microprogramming software is related to the lack of data cleaning measures at the control level. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failure...
The vulnerability of the sub_43F020 (/goform/formPdbUpConfig) function in the UTT HiPER 810 router software allows a hacker to execute arbitrary commands.
The vulnerability of the sub43F020 /goform/formPdbUpConfig function in the UTT HiPER 810 router microprogramming system is related to the lack of measures taken for data cleaning at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...