The vulnerability of the Vim text editor, related to reading beyond the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the Vim text editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

Vulnerability of the rtl8180_tx() function in the drivers/net/wireless/realtek/rtl818x/rtl8180/dev.c file – This is a driver for supporting Realtek wireless adapter devices in the Linux operating system. It allows a hacker to cause a service failure.

Vulnerability of the rtl8180tx function in the drivers/net/wireless/realtek/rtl818x/rtl8180/dev.c file – The drivers for Realtek wireless adapters in the Linux operating system are vulnerable due to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to cause...

The vulnerability of the `etnaviv_iommu_unmap_gem()` function in the `driver/gpu/drm/etnaviv/etnaviv_mmu.c` driver module allows a hacker to cause a service failure in the Linux operating system’s Direct Rendering Infrastructure (DRI) kernel.

The vulnerability of the etnaviviommuunmapgem function in the driver/gpu/drm/etnaviv/etnavivmmu.c driver module related to the Direct Rendering Infrastructure DRI of the Linux operating system exposes confidential information. Exploiting this vulnerability could allow an attacker to cause a servi...

The vulnerability of the enter_rtas() function in the arch/powerpc/kernel/rtas.c module, which is part of the PowerPC platform support for the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the enterrtas function in the arch/powerpc/kernel/rtas.c module of the Linux operating system’s PowerPC kernel is related to an uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the kszphy_config_reset() function in the drivers/net/phy/micrel.c module – A network physical layer PHY driver for the Linux operating system, which allows a hacker to cause a service failure

Vulnerability of the kszphyconfigReset function in the drivers/net/phy/micrel.c module – The Linux physical layer network driver relies on the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the virtio_gpu_conn_get_modes() function in the drivers/gpu/drm/virtio/virtgpu_display.c module – This driver is a DRI support driver for Linux kernels, which allows an attacker to cause a service failure.

Vulnerability of the virtiogpuconngetmodes function in the drivers/gpu/drm/virtio/virtgpudisplay.c module – The driver that supports Linux’s Direct Rendering Infrastructure DRI is vulnerable due to a pointer dereferencing issue. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerabilities of the functions p9_conn Cancel() and p9_read_work() in the net/9p/trans_fd.c module of the 9P protocol implementation in the Linux operating system allow a hacker to cause a service failure.

The vulnerabilities of the functions p9conn Cancel and p9readwork in the net/9p/transfd.c module of the 9P protocol implementation in the Linux operating system are related to the distribution of resources without any restrictions or regulations. Exploiting these vulnerabilities could allow a...

The vulnerability of the Dynamic Vectorization and Streaming Transfer (DVS) implementation of the Cisco Secure Web Appliance allows a hacker to circumvent existing security restrictions.

The vulnerability of the Dynamic Vectorization and Streaming Transfer DVS mechanism implemented in Cisco Secure Web Appliance lies in the loading of code without checking its integrity. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions remotely...

The vulnerability of the icom_probe() function in the drivers/tty/serial/icom.c module of the console support driver for the TTY serial port in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the icomprobe function in the drivers/tty/serial/icom.c module of the console support driver for the TTY serial port in the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a...

The vulnerability of the f2fs_new_node_page() function in the fs/f2fs/node.c file of the F2FS file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the f2fsnewnodepage function in the fs/f2fs/node.c file of the F2FS file system in the Linux operating system is related to code errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the drivetemp_scsi_command() function in the drivers/hwmon/drivetemp.c module of the Linux operating system’s hardware monitoring driver allows a hacker to cause a service failure.

The vulnerability of the drivetempscsicommand function in the drivers/hwmon/drivetemp.c file of the Linux device monitoring driver module relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a system failure...

The vulnerability of the NVUE interface in NVIDIA Cumulus Linux and Operating System (NVOS) operating systems allows attackers to increase their privileges.

The vulnerability of the NVUE interface in NVIDIA Cumulus Linux and Operating System NVOS systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the setDiagnosisCfg handler in the /usr/sbin/lighttpd executable file of the TOTOLINK X5000R router microprogramming system allows a hacker to inject arbitrary command-line parameters.

The vulnerability of the setDiagnosisCfg handler in the /usr/sbin/lighttpd executable file of the TOTOLINK X5000R router microprogramming system is related to the insertion or modification of arguments. Exploiting this vulnerability allows a remote attacker to insert arbitrary command-line...

The vulnerability of the Python library for working with PDF files, PyPDF, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Python library for working with PDF files, PyPDF, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the `get_handler_for_db()` function in the `security/integrity/platform_certs/keyring_handler.h` module of the Linux kernel’s security/integrity subsystem allows a attacker to trigger a service failure.

The vulnerability of the gethandlerfordb function in the security/integrity/platformcerts/keyringhandler.h module of the Linux kernel’s security/integrity subsystem is related to improper cleaning or release of resources. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the pci_dev_lock() function in the drivers/pci/pci.c module of the Linux operating system’s device support driver allows a hacker to cause a service failure.

The vulnerability of the pcidevlock function in the drivers/pci/pci.c module of the Linux operating system’s device support driver for PCI devices is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nf_flow_table_free() function in the kernel module net/netfilter/nf_flow_table_core.c of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nfflowtablefree function in the kernel module net/netfilter/nfflowtablecore.c of the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity,...

The vulnerability of the iavf_reset_task() function in the drivers/net/ethernet/intel/iavf/iavf_main.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iavfresettask function in the drivers/net/ethernet/intel/iavf/iavfmain.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the f2fs_do_zero_range() function in the fs/f2fs/file.c module of the F2FS file system support in Linux kernel allows a attacker to cause a service failure.

The vulnerability of the f2fsdozerorange function in the fs/f2fs/file.c module of the F2FS file system support in Linux kernel involves unconstrained and unrestricted resource allocation. Exploiting this vulnerability could allow a attacker to cause service failures...

The vulnerability of the f2fs_evict inode() function in the fs/f2fs/inode.c module of the F2FS file system support in Linux’s kernel allows a attacker to cause a service failure.

The vulnerability of the f2fsevict inode function in the fs/f2fs/inode.c module of the F2FS file system support in Linux operating systems is related to data processing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the skbchecksum_help() function in the net/core/dev.c module, which supports networking functions of the Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the skbchecksumhelp function in the net/core/dev.c module, which is part of Linux’s kernel-based networking functions, is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of the lpfc_dmp_dbg() function in the drivers/scsi/lpfc/lpfc_init.c module – The SCSI device support driver in the Linux operating system allows a hacker to cause a service failure.

Vulnerability of the lpfcdmpdbg function in the drivers/scsi/lpfc/lpfcinit.c module – The Linux SCSI device support driver is vulnerable to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `hugetlbfs_error_remove_page()` function in the `fs/hugetlbfs/inode.c` module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the hugetlbfserrorremovepage function in the fs/hugetlbfs/inode.c module of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the rtllib_beacons_stop() function in the drivers/staging/rtl8192e/rtllib_softmac.c module – supports additional devices in the Linux operating system’s kernel, allowing a hacker to cause a service failure.

Vulnerability of the rtllibbeaconsstop function in the drivers/staging/rtl8192e/rtllibsoftmac.c file – Support for additional Linux kernel devices is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the RDBMS Listener component of the Oracle Database Server management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the RDBMS Listener component of the Oracle Database Server management system is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the fromAdvSetWan() function in the Tenda F453 router software allows a hacker to disrupt network services.

The vulnerability of the fromAdvSetWan function in the Tenda F453 router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Vulnerability of the qat_dh_compute_value() function in the drivers/crypto/qat/qat_common/qat_asym_algs.c module – a driver for the Linux kernel’s cryptographic accelerator, allowing a hacker to cause a service failure.

Vulnerability of the qatdhcomputevalue function in the drivers/crypto/qat/qatcommon/qatasymalgs.c module – The driver for the Linux kernel’s cryptographic accelerator is vulnerable to integer overflow or cyclic shift attacks. Exploiting this vulnerability could allow an attacker to cause a system...

The vulnerability of the WSO2 platform for integrating application programming interfaces, applications, and web services stems from incorrect restrictions on XML links to external objects. This allows attackers to carry out XXE attacks.

The vulnerability of the WSO2 platform for integrating application programming interfaces, applications, and web services is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a malicious actor to perform XXE attacks remotely...

The vulnerability of the __is_bitmap_valid() function in the fs/f2fs/checkpoint.c module of the F2FS file system support in Linux’s operating system allows a malicious actor to trigger a service failure.

The vulnerability of the isbitmapvalid function in the fs/f2fs/checkpoint.c module of the F2FS file system support in Linux’s operating system is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the user_dlmdestroy_lock() function in the fs/ocfs2/dlmfs/userdlm.c module of the OCFS2 file system support in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the userdlmdestroylock function in the fs/ocfs2/dlmfs/userdlm.c module of the OCFS2 file system support in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the hi3xxx_smp_prepare_cpus() function in the arch/arm/mach-hisi/platsmp.c module, which is part of the ARM platform support for the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the hi3xxxsmppreparecpus function in the arch/arm/mach-hisi/platsmp.c module, which is part of the Linux operating system’s ARM platform support, involves a memory leak. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the gfs2_check_sb() function in the fs/gfs2/ops_fstype.c file of the GFS2 file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the gfs2checksb function in the fs/gfs2/opsfstype.c file of the GFS2 file system in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `ivpu_bo_print_info()` function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the ivpuboprintinfo function in the drivers/accel/ivpu/ivpugem.c file of the Linux kernel is related to the dereferencing of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the ivpu_pm_init() function in the drivers/accel/ivpu/ivpu_pm.c module – This driver for supporting the Intel NPU core in the Linux operating system allows a hacker to trigger a service failure.

Vulnerability of the ivpupminit function in the drivers/accel/ivpu/ivpupm.c module – The Linux NPU processor driver has vulnerabilities related to state management. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the hda_dsp_dump_ext_rom_status() function in the sound/soc/sof/intel/hda.c module, which is part of the Linux SoC audio support, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hdadspdumpextromstatus function in the sound/soc/sof/intel/hda.c module, which is part of the Linux SoC audio support, involves copying buffers without checking their size—a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromis...

The vulnerability of the fastrpc_cb_probe() function in the drivers/misc/fastrpc.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fastrpccbprobe function in the drivers/misc/fastrpc.c module of the Linux kernel is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability of the xhci_write_64() function in the drivers/usb/host/xhci.h module of the Linux device support driver for USB chipsets allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xhciwrite64 function in the drivers/usb/host/xhci.h module of the Linux device support driver library is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker t...

The vulnerability of the nfsd_proc_write() function in the fs/nfsd/nfsproc.c module, which is part of the NFS network file system support in Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the nfsdprocwrite function in the fs/nfsd/nfsproc.c module, which is part of the NFS network file system support in Linux kernels, is related to code errors. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the JwtAuthenticator component in the authentication and authorization library pac4j-jwt allows a perpetrator to circumvent existing security restrictions.

The vulnerability of the JwtAuthenticator component in the authentication and authorization library pac4j-jwt is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions by sending speciall...

The vulnerability of the NVUE interface in NVIDIA Cumulus Linux and Operating System (NVOS) operating systems allows attackers to increase their privileges.

The vulnerability of the NVUE interface in NVIDIA Cumulus Linux and Operating System NVOS systems is related to privilege assignment errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of ClamBC, a byte-code interpreter in the ClamAV antivirus software, allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the byte-code interpreter in the ClamAV antivirus software package ClamBC is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause system failures...

The vulnerability of the cmd/cgo component in the Go programming language allows a hacker to execute arbitrary code.

The vulnerability of the cmd/cgo component in the Go programming language is related to incorrect code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the diag_command.php component of the Netgate pfSense software, which allows a hacker to read arbitrary files.

The vulnerability of the diagcommand.php component of the Netgate pfSense software firewall is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a remote attacker to read arbitrary files...

The vulnerability of the console-based graphic editor ImageMagick, related to reading beyond the buffer limit of memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the console-based graphic editor ImageMagick is related to reading data beyond the buffer limit of memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability in the virtualization subsystem’s arch/x86/kvm/mmu.c module on the Linux operating system’s x86 kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability in the arch/x86/kvm/mmu.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

The vulnerability of the `alloc_quote_buf()` function in the drivers/virt/coco/tdx-guest/tdx-guest.c file of the Linux kernel allows a hacker to gain unauthorized access to protected information.

The vulnerability of the allocquotebuf function in the drivers/virt/coco/tdx-guest/tdx-guest.c file of the Linux kernel is related to errors in handling exceptional conditions. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information...

The vulnerability of the hfi1_write_iter() function in the drivers/infiniband/hw/hfi1/file_ops.c file of the Linux operating system’s kernel driver allows a attacker to cause a service failure.

The vulnerability of the hfi1writeiter function in the drivers/infiniband/hw/hfi1/fileops.c file of the Linux kernel’s InfiniBand support driver is related to the use of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nft_tproxy_dump() function in the net/netfilter/nft_tproxy.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nfttproxydump function in the net/netfilter/nfttproxy.c module of the netfilter component of the Linux operating system is related to the use of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerabilities of the functions iavf_init_asq() and iavf_init_arq() in the driver drivers/net/ethernet/intel/iavf/iavf_adminq.c of the Intel Ethernet network adapter driver for the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of the functions iavfinitasq and iavfinitarq in the file drivers/net/ethernet/intel/iavf/iavfadminq.c of the Intel Ethernet network adapter driver for the Linux operating system are related to a memory leak. Exploiting these vulnerabilities could allow an attacker to compromis...

The vulnerability of Moxa industrial computers lies in the insufficient protection of registration data, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Moxa industrial computers lies in the insufficient protection of registration data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...