Уязвимость платформы для создания индивидуальных веб-приложений CRM Руководитель, связанная с непринятием мер по защите структуры запроса SQL, позволяющая нарушителю выполнить произвольный код

Уязвимость платформы для создания индивидуальных веб-приложений CRM Руководитель связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

The vulnerability of the __pskb_pull_tail() function in the net/core/skbuff.c module, which supports kernel network functions in the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the pskbpulltail function in the net/core/skbuff.c module related to kernel network functions of the Linux operating system involves disclosing confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the function ieee80211_rx_mgmt_assoc_resp() in the module net/mac80211/mlme.c of the mac80211 stack in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ieee80211rxmgmtassocresp function in the net/mac80211/mlme.c module of the mac80211 stack in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the vkms_release() function in the drivers/gpu/drm/vkms/vkms_drv.c module of the Direct Rendering Infrastructure (DRI) kernel driver of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the vkmsrelease function in the drivers/gpu/drm/vkms/vkmsdrv.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to compromise the...

The vulnerability of the fcoe_init() function in the drivers/scsi/fcoe/fcoe.c driver for SCSI devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fcoeinit function in the drivers/scsi/fcoe/fcoe.c driver for Linux SCSI devices is related to the occurrence of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

The vulnerability of the ath12k_mac_mgmt_tx_wmi() function in the drivers/net/wireless/ath/ath12k/mac.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ath12kmacmgmttxwmi function in the drivers/net/wireless/ath/ath12k/mac.c file of the Atheros/Qualcomm wireless adapter driver in the Linux operating system is related to the assignment of the NULL pointer pointer. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the `addrconf_del_dad_work()` function in the `net/ipv6/addrconf.c` module of the Linux operating system’s IPv6 kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the addrconfdeldadwork function in the net/ipv6/addrconf.c module of the Linux operating system’s IPv6 kernel implementation is related to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the ext4sbrelease() function in the fs/ext4/sysfs.c file of the Ext4 file system of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext4sbrelease function in the fs/ext4/sysfs.c file of the Ext4 file system in the Linux operating system is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the __sta_infodestroy_part1() function in the net/mac80211/sta_info.c module, part of the mac80211 stack in the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the stainfodestroypart1 function in the net/mac80211/stainfo.c module, part of the mac80211 stack in the Linux operating system, is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

The vulnerability of the blk_mq_elv_switchnone() function in the block/blk-mq.c module, which supports the block-level kernel in the Linux operating system. This vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the blkmqelvswitchnone function in the block/blk-mq.c module, which supports the block-level kernel in the Linux operating system, is related to the assignment of a NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

The vulnerability of the perf_pending_task_sync() function in the kernel/events/core.c module, which manages kernel-level events in Linux operating systems, allows a attacker to cause a service failure.

The vulnerability of the perfpendingtasksync function in the kernel/events/core.c module, which handles kernel events in Linux operating systems, is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ishtp_cl_bus_match() function in Linux operating system kernels allows a attacker to cause a system crash in the kernel.

The vulnerability of the ishtpclbusmatch function in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system crash in the Linux kernel...

The vulnerability of the ufshcd_wait_for_dev_cmd() function in Linux operating systems allows a attacker to compromise the accessibility of protected information.

The vulnerability of the ufshcdwaitfordevcmd function in Linux operating systems is related to the unlimited distribution of resources. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

The vulnerability of the debugfs_remove() function in Linux operating systems allows a hacker to compromise the accessibility of protected information.

The vulnerability of the debugfsRemove function in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the vmxnet3_xdp_xmit_frame() function in Linux kernel allows a attacker to compromise the accessibility of protected information.

The vulnerability of the vmxnet3xdpxmitframe function in Linux operating systems is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the rcu_barrier() function in Linux operating systems allows a attacker to compromise the accessibility of protected information.

The vulnerability of the rcubarrier function in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

The vulnerability of the sk_stream_kill_queues() function in the Linux operating system allows a hacker to compromise the accessibility of protected information.

The vulnerability of the skstreamkillqueues function in the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the corporate version of the GitHub Enterprise Server, related to the lack of measures taken at the management level to clean up data, allows a violator to execute arbitrary code.

The vulnerability of the corporate version of the GitHub Enterprise Server is related to the lack of measures taken at the management level to protect data. Exploitation of this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the nfsd_init_dirlist_pages() function in the fs/nfsd/nfsproc.c module, which is part of the Linux kernel’s Network File System support, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nfsdinitdirlistpages function in the fs/nfsd/nfsproc.c module, which is part of the Linux kernel’s Network File System support, involves copying buffers without checking their size—a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the mpi3mr_init_ioc() function in Linux operating systems allows a attacker to compromise the accessibility of protected information.

The vulnerability of the mpi3mrinitioc function in Linux operating systems is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the iwl_mvm_tx_skb_sta() function in the drivers/net/wireless/intel/iwlwifi/mvm/tx.c file of the Intel wireless driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the function iwlmvmtxskbsta in the driver code drivers/net/wireless/intel/iwlwifi/mvm/tx.c of the Intel wireless networking driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker ...

The vulnerability of the az6027_i2c_xfer() function in the driver/media/usb/dvb-usb/az6027.c file of the Linux operating system’s multimedia device USB driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the az6027i2cxfer function in the driver/media/usb/dvb-usb/az6027.c file of the Linux multimedia device driver framework is related to the dereferencing of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

The vulnerability of the propagate_one() function in the fs/pnode.c file of the Linux kernel’s file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the propagateone function in the fs/pnode.c file of the Linux kernel file system is related to the dereferencing of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the ext4_dio_write_iter() function in the fs/ext4/file.c module of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4diowriteiter function in the fs/ext4/file.c file of the Ext4 file system in the Linux operating system is related to data processing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the __copy_xstate_to_uabi_buf() function in the arch/x86/kernel/fpu/xstate.c module, which is part of the Linux kernel support for x86 architecture, allows a malicious actor to trigger a service denial.

The vulnerability of the copyxstatetouabibuf function in the arch/x86/kernel/fpu/xstate.c module, which is part of the Linux kernel support for x86 architecture, involves the dereferencing of the NULL pointer. Exploiting this vulnerability could allow an attacker to trigger a service denial...

The vulnerability of the cros_usbpd_notify_init() function in the drivers/platform/chrome/cros_usbpd_notify.c module, which is part of the Chrome OS hardware support for Linux kernel-based devices, allows a hacker to trigger a service failure.

The vulnerability of the crosusbpdnotifyinit function in the drivers/platform/chrome/crosusbpdnotify.c module, which is part of the Chrome OS hardware support for Linux kernel-based operating systems, stems from the lack of checking the return value. Exploiting this vulnerability could allow an...

The vulnerability of the __ibmvnic_open() function in the drivers/net/ethernet/ibm/ibmvnic.c file of the Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ibmvnicopen function in the drivers/net/ethernet/ibm/ibmvnic.c file of the Ethernet network adapter driver for the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the insufficient validation of input data, allowing a perpetrator to execute arbitrary code.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary co...

The vulnerability of the Google Chrome browser’s Media component, which allows a hacker to increase their privileges

The vulnerability of the Google Chrome browser’s Media component relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to increase their privileges...

The vulnerability of the `hvpci_restore_msi_msg()` function in the `driver/pci/controller/pci-hyperv.c` driver for Linux PCI device drivers allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hvpcirestoremsimsg function in the driver/pci/controller/pci-hyperv.c driver for Linux PCI device drivers is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the vxlan_flagattr_error() function in the Linux operating system’s kernel module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vxlanflagattrerror function in the Linux kernel module is related to the occurrence of operations that go beyond the buffer boundaries in memory. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the dwc3_qcom_probe() function in the drivers/usb/dwc3/dwc3-qcom.c driver code of the DesignWare-based USB3 controller driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dwc3qcomprobe function in the drivers/usb/dwc3/dwc3-qcom.c file of the DesignWare-based USB3 controller driver in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `reset_tdp_shadow_zero_bits_mask()` function in the `arch/x86/kvm/mmu/mmu.c` module of the virtualization subsystem on the x86 architecture of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the resettdpshadowzerobitsmask function in the arch/x86/kvm/mmu/mmu.c module of the virtualization subsystem on the x86 architecture of the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the cifs_crypto_secmech_release() function in the fs/smb/client/cifsencrypt.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the cifscryptosecmechrelease function in the fs/smb/client/cifsencrypt.c module of the Linux kernel is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `bnxt_rx_pkt()` function in the `drivers/net/ethernet/broadcom/bnxt/bnxt.c` file of the Linux kernel’s Ethernet adapter support driver allows a hacker to cause a system failure.

The vulnerability of the bnxtrxpkt function in the drivers/net/ethernet/broadcom/bnxt/bnxt.c file of the Linux kernel’s Ethernet adapter support driver is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the gic_configure_irq() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the gicconfigureirq function in the Linux operating system is related to the improper release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `early_init_dt_scan_memory()` function in Linux operating systems allows a hacker to compromise the accessibility of data.

The vulnerability of the earlyinitdtscanmemory function in Linux operating systems is related to the use of uninitialized resources. Exploiting this vulnerability can allow an attacker to compromise data accessibility...

The vulnerability of the dev_coredumpm() function in Linux kernel allows attackers to compromise the accessibility of protected information.

The vulnerability of the devcoredumpm function in Linux kernels is related to improper control of resource identifiers “resource leakage”. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the Secure Boot component in Linux operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Secure Boot component in Linux operating systems is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the ieee80211_subif_start_xmit() function in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the ieee80211subifstartxmit function in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `mcde_dsi_bind()` function in the `drivers/gpu/drm/mcde/mcde_dsi.c` file of the Linux kernel’s Direct Rendering Infrastructure driver allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the mcdedsibind function in the drivers/gpu/drm/mcde/mcdedsi.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to errors during link counter updates. Exploiting this vulnerability may allow an attacker to gain unauthorized access to...

The vulnerability of the vub300_enable_sdio_irq() function in the drivers/mmc/host/vub300.c file of the MMC/SD/SDIO driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the vub300enablesdioirq function in the drivers/mmc/host/vub300.c file of the Linux kernel’s MMC/SD/SDIO driver module is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the hci_create_cis_sync() function in the net/bluetooth/hci_conn.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to cause a service failure.

The vulnerability of the hcicreatecissync function in the net/bluetooth/hciconn.c module of the Linux kernel’s Bluetooth subsystem is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the load_elf_binary() function in the fs/binfmt_elf.c file of the Linux kernel file system allows a attacker to cause a service failure.

The vulnerability of the loadelfbinary function in the fs/binfmtelf.c file of the Linux kernel’s file system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mt7915_put_hif2() function in the drivers/net/wireless/mediatek/mt76/mt7915/pci.c file of the wireless adapter driver for Mediatek’s Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mt7915puthif2 function in the driver/net/wireless/mediatek/mt76/mt7915/pci.c file of the Mediatek wireless adapter driver for the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability could...

The vulnerability of the zswap_writeback_entry() function in the mm/zswap.c module of the Linux kernel’s memory management subsystem allows a hacker to cause a service failure.

The vulnerability of the zswapwritebackentry function in the mm/zswap.c module of the Linux kernel’s memory management subsystem is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mt7915_mcu_exit() function in the drivers/net/wireless/mediatek/mt76/mt7915/mcu.c file of the Mediatek wireless communication adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mt7915mcuexit function in the drivers/net/wireless/mediatek/mt76/mt7915/mcu.c file of the Mediatek wireless communication adapter driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker...

The vulnerability of the rtw89.Append ProbeReq_ie() function in the driver/net/wireless/realtek/rtw89/fw.c file of the Realtek wireless adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rtw89.Append ProbeReqie function in the drivers/net/wireless/realtek/rtw89/fw.c file of the Realtek wireless driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability may allow an attacker to cause a service...

The vulnerabilities of the functions ism_cmd() and ism_probe() in the driver drivers/s390/net/ism_drv.c file of the network driver for the S390 platform of the Linux operating system allow a malicious actor to cause service failures.

The vulnerabilities of the functions ismcmd and ismprobe in the drivers/s390/net/ismdrv.c file of the S390 network driver for the Linux operating system are related to state management errors. Exploiting these vulnerabilities can allow an attacker to cause a service failure...

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) allows a perpetrator to execute arbitrary code or disclose protected information.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF lies in the ability to exploit memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrar...