The vulnerability of the radeon_acpi_vfct_bios() function in the drivers/gpu/drm/radeon/radeon_bios.c driver of the Direct Rendering Infrastructure (DRI) graphics card for Linux operating systems allows a hacker to cause a system failure.

The vulnerability of the radeonacpivfctbios function in the drivers/gpu/drm/radeon/radeonbios.c driver of the Direct Rendering Infrastructure DRI video card for Linux operating systems is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a system...

The vulnerability of the pPortMapIndex function (implemented in goform/formDelPortMapping) in the Tenda W20E router software allows a hacker to execute arbitrary commands.

The vulnerability of the pPortMapIndex function implemented in goform/formDelPortMapping of the Tenda W20E router software is related to the execution of operations outside the buffer in the parameter strcpy area of memory. Exploiting this vulnerability allows a remote attacker to execute arbitra...

The vulnerability of the mlx5e_ptp_open() function in the drivers/net/ethernet/mellanox/mlx5/core/en/ptp.c driver for Mellanox Ethernet network adapters in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mlx5eptpopen function in the drivers/net/ethernet/mellanox/mlx5/core/en/ptp.c driver for Mellanox Ethernet network adapters in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failur...

The vulnerability of the addWewifiWhiteUser function (in the goform/formAddWewifiWhiteUser function) in the Tenda W20E router software allows a hacker to execute arbitrary commands.

The vulnerability of the addWewifiWhiteUser function in the goform/formAddWewifiWhiteUser function of the Tenda W20E router’s microprogramming software is related to the execution of operations outside the buffer in the userInfo parameter’s memory. Exploiting this vulnerability could allow a remo...

The vulnerability of the mem_dump_obj() function in the mm/util.c module of the Linux kernel’s memory management subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the memdumpobj function in the mm/util.c module of the Linux kernel’s memory management subsystem is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the PT NGFW network firewall, related to the lack of access control, allows a intruder to gain unauthorized access to MinIO backup copies.

The vulnerability of the PT NGFW network firewall is related to the lack of access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to MinIO’s backup copies...

The vulnerability of the `rt2x00libremove_hw()` function in the `drivers/net/wireless/ralink/rt2x00/rt2x00dev.c` file of the Ralink wireless adapter driver in the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the rt2x00libremovehw function in the drivers/net/wireless/ralink/rt2x00/rt2x00dev.c file of the Ralink wireless adapter driver in the Linux operating system kernel is related to improper memory release. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the vmxnet3_process_xdp() function in the drivers/net/vmxnet3/vmxnet3_xdp.c file of the Linux kernel network device driver allows a attacker to cause a service failure.

The vulnerability of the vmxnet3processxdp function in the drivers/net/vmxnet3/vmxnet3xdp.c file of the Linux kernel device driver framework is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the corporate messaging system Squadus, related to errors in verifying the cryptographic signature, allows attackers to gain access to user accounts.

The vulnerability of the corporate messaging system Squadus is related to errors in verifying the cryptographic signature. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to user accounts...

The vulnerability of the ath9k_wmi_ctrl_rx() function in the drivers/net/wireless/ath/ath9k/wmi.c driver for Atheros/Qualcomm wireless communication adapters in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ath9kwmictrlrx function in the drivers/net/wireless/ath/ath9k/wmi.c driver for Atheros/Qualcomm wireless communication adapters in the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the EAP-MSCHAPv2 VPN-client plugin from StrongSwan allows a hacker to execute arbitrary code and trigger a service denial.

The vulnerability of the EAP-MSCHAPv2 VPN-client plugin from StrongSwan is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code and cause a service failure...

The vulnerability of the ath9k_hif_usb_reg_in_cb() function in the drivers/net/wireless/ath/ath9k/hif_usb.c driver module of the Atheros/Qualcomm wireless communication adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ath9khifusbregincb function in the drivers/net/wireless/ath/ath9k/hifusb.c driver for Atheros/Qualcomm wireless communication adapters in the Linux operating system is related to the use of memory after deallocation. Exploiting this vulnerability could allow an attacker t...

The vulnerability of the tcindex_set_parms() function in the net/sched/cls_tcindex.c module of the network/sched subsystem of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tcindexsetparms function in the net/sched/clstcindex.c module of the network scheduling subsystem in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the setup_callback_client() function in the fs/nfsd/nfs4callback.c module, which supports the Network File System in Linux kernels, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setupcallbackclient function in the fs/nfsd/nfs4callback.c module, which supports the Network File System in Linux kernels, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the Active! mail client is related to the lack of measures taken to protect the website structure, allowing attackers to carry out XSS attacks.

The vulnerability of the mail client Active! is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the reporting module of the Bukmmadm system of the automation system “BUK TS-G” allows for the execution of arbitrary code.

The vulnerability of the reporting module of the Bukmmadm system in the automation system “BUK TS-G” is related to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary codes...

The vulnerability of the nfsaclsvc_encode_getaclres() function in the fs/nfsd/nfs2acl.c module, which is part of the Linux kernel’s Network File System support, allows a attacker to compromise the confidentiality and integrity of protected information.

The vulnerability of the nfsaclsvcencodegetaclres function in the fs/nfsd/nfs2acl.c module, which is part of the Linux kernel’s Network File System support, involves the exposure of confidential information. Exploiting this vulnerability could allow an attacker to compromise the confidentiality a...

The vulnerabilities of the functions mtype_add_cidr() and mtype_del_cidr() in the module net/netfilter/ipset/ip_set_hash_gen.h of the netfilter component of the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mtypeaddcidr and mtypedelcidr functions in the net/netfilter/ipset/ipsethashgen.h module of the netfilter component of the Linux operating system is related to integer overflow due to an incorrect definition of CIDRPOS. Exploiting this vulnerability could allow an attacke...

The vulnerability of the Statistical Database System lies in the lack of authentication for critical functions, allowing attackers to gain access to read, modify, and delete data within the database.

The vulnerability of the Statistical Database System is related to the lack of authentication for critical functions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to read, modify, and delete data in the database...

The vulnerability of the bam_dma_probe() function in the drivers/dma/qcom/bam_dma.c file of the Linux kernel’s DMA driver, which allows a hacker to trigger a service failure.

The vulnerability of the bamdmaprobe function in the drivers/dma/qcom/bamdma.c file of the Linux kernel’s DMA driver module is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the migrate_device_finalize() function in the mm/migrate_device.c module of the Linux kernel’s memory management subsystem allows a hacker to trigger a service failure.

The vulnerability of the migratedevicefinalize function in the mm/migratedevice.c file of the Linux kernel’s memory management subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the i40e_vsi_request_irq_msix() function in the drivers/net/ethernet/intel/i40e/i40e_main.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the i40evsirequestirqmsix function in the drivers/net/ethernet/intel/i40e/i40emain.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the use of an incorrect index. Exploiting this vulnerability could allow an attacker to compromi...

The vulnerability of the check_alu_op() function in the kernel/bpf/verifier.c file of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the checkaluop function in the kernel/bpf/verifier.c file of the Linux operating system is related to deficiencies in the mechanism for verifying input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mtk_drm_bind() function in the driver/gpu/drm/mediatek/mtk_drm_drv.c file of the Direct Rendering Infrastructure (DRI) driver for Mediatek graphics cards in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mtkdrmbind function in the driver/gpu/drm/mediatek/mtkdrmdrv.c file of the Direct Rendering Infrastructure DRI driver for Mediatek graphics cards in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow...

The vulnerability of the __ext4_iget() function in the fs/ext4/inode.c file of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ext4iget function in the fs/ext4/inode.c file of the Linux operating system is related to incorrect validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the bpf_redirect_neigh() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the bpfredirectneigh function in the Linux operating system is related to the unlimited distribution of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mechanism for destroying arrays containing objects of the PHP interpreter’s object model allows a attacker to bypass the protection provided by disable_functions and invoke operating system commands.

The vulnerability of the mechanism for destroying arrays containing objects of the PHP interpreter’s object model is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to bypass the disablefunctions protection mechanism and invoke operating syste...

The vulnerability of the gss_read_proxy_verf() function in the net/sunrpc/auth_gss/svcauth_gss.c module of the RPC protocol implementation in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the gssreadproxyverf function in the net/sunrpc/authgss/svcauthgss.c module of the RPC protocol implementation in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service failures...

The vulnerability of the `udp_tunnel_sock_release()` function in the `net/ipv4/udp_tunnel_core.c` module of the Linux operating system’s IPv4 protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the udptunnelsockrelease function in the net/ipv4/udptunnelcore.c module of the Linux kernel’s IPv4 implementation is related to the use of a NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the svm_range_restore_pages() function in the driver/gpu/drm/amd/amdkfd/kfd_svm.c file of the DRI graphics hardware driver for AMD processors in Linux operating systems allows a malicious actor to cause service failure.

The vulnerability of the svmrangerestorepages function in the driver/gpu/drm/amd/amdkfd/kfdsvm.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to the improper disabling or release of resources. Exploiting this vulnerability may...

The vulnerability of the damon_reclaim_apply_parameters() function in the mm/damon/reclaim.c module of the Linux kernel’s memory management subsystem allows a hacker to trigger a service failure.

The vulnerability of the damonreclaimapplyparameters function in the mm/damon/reclaim.c module, a memory management subsystem of the Linux operating system, is related to insufficient validation of input data during division by zero. Exploiting this vulnerability could allow an attacker to trigge...

The vulnerability of the io_link_skb() function in the io_uring/notif.c module of the Linux kernel’s asynchronous input/output interface allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iolinkskb function in the iouring/notif.c module of the Linux kernel’s asynchronous input/output interface is related to incorrect comparisons. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the gf_list_get function in the MP4Box multimedia platform’s utility allows a hacker to cause a service failure.

The vulnerability of the gflistget function in the MP4Box multimedia platform of GPAC is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the TextEditingConversion() function in the microprogramming software for Tenda AC15 allows a hacker to execute arbitrary code.

The vulnerability of the TextEditingConversion function in the Tenda AC15 router’s microprogramming software is related to the operation of writing data outside the buffer in memory when processing the wpapskcrypto24g parameter. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of the svc_defer() function in the net/sunrpc/svc_xprt.c module of the Linux operating system’s RPC protocol implementation allows a attacker to cause a service failure.

The vulnerability of the svcdefer function in the net/sunrpc/svcxprt.c module of the Linux operating system’s RPC protocol implementation is related to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to cause service failures...

The vulnerability of the Apache NiFi data processing platform, related to the lack of authentication, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Apache NiFi data processing platform lies in the lack of authentication. Exploiting this vulnerability allows a malicious actor to remotely compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the `loadFile` method in the jsPDF library allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the loadFile method in the jsPDF library relates to an incorrect limitation on the path name restrictions for directories. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the fromRouteStatic() function in the httpd component of the Tenda F453 microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the fromRouteStatic function in the httpd component of the Tenda F453 microprogramming system for routers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the `trace_pid_write()` function in the kernel/trace/trace.c module, which supports Linux operating system kernel tracing, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tracepidwrite function in the kernel/trace/trace.c module, which supports Linux operating system tracing, is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the Linux operating system’s kernel, related to insufficient validation of input data, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the rndis_query() function in the drivers/net/usb/rndis_host.c module of the Linux kernel’s USB network adapter driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rndisquery function in the drivers/net/usb/rndishost.c module of the Linux kernel’s USB network adapter driver is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

The vulnerability of the vxlan_xmit_one() function in the drivers/net/vxlan/vxlan_core.c file of the Linux kernel’s network device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vxlanxmitone function in the drivers/net/vxlan/vxlancore.c file of the Linux kernel’s network device driver is related to the use of the NULL pointer pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the persistent_ram_vmap() function in the fs/pstore/ram_core.c module of the Linux kernel’s persistent storage support allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the persistentramvmap function in the fs/pstore/ramcore.c module, which supports the persistent storage of the Linux kernel, is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise t...

The vulnerability of the io_init() function in the drivers/mtd/ubi/build.c file of the MTD memory driver for the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ioinit function in the drivers/mtd/ubi/build.c file of the MTD memory driver for the Linux operating system relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...

The vulnerability in the web interface for managing microprogramming router Tenda F3 allows a perpetrator to compromise the integrity of the protected information.

The vulnerability in the web interface for managing microprogramming router software Tenda F3 is related to incorrect restrictions on the visible layers or frames of the user interface. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected...

The vulnerability of the fromNatStaticSetting() function in the httpd component of the Tenda F453 microprogramming system of routers allows a attacker to execute arbitrary code.

The vulnerability of the fromNatStaticSetting function in the httpd component of the Tenda F453 microprogramming system for routers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the erofs_fc_fill_super() function in the fs/erofs/super.c file of the EROFS Enhanced ReadOnly File System kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the erofsfcfillsuper function in the fs/erofs/super.c file of the EROFS Enhanced ReadOnly File System kernel of the Linux operating system is related to a buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

The vulnerability of the rtl8187_rx_cb() function in the driver/net/wireless/realtek/rtl818x/rtl8187/dev.c file of the wireless communication adapter driver developed by Realtek for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rtl8187rxcb function in the drivers/net/wireless/realtek/rtl818x/rtl8187/dev.c file of the wireless adapter driver module developed by Realtek for the Linux operating system is related to improper cleanup or release of resources. Exploiting this vulnerability could allow ...

The vulnerability of the fromSafeEmailFilter() function in the httpd component of the Tenda F453 microprogramming system of routers allows a hacker to execute arbitrary code.

The vulnerability of the fromSafeEmailFilter function in the httpd component of the Tenda F453 microprogramming system for routers involves an escape operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the tcp_add_backlog() function in the net/ipv4/tcp_ipv4.c module, which is part of the Linux operating system’s IPv4 protocol implementation, allows a hacker to cause a service failure.

The vulnerability of the tcpaddbacklog function in the net/ipv4/tcpipv4.c module, which is part of the Linux operating system’s IPv4 protocol implementation, involves integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow a remote attacker to cause a service...