The vulnerability of the mptcp_worker() function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mptcpworker function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux’s kernel is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

The vulnerability of the net_failover_select_queue() function in the drivers/net/net Failover.c module of the Linux kernel network device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the net FailoverSelectQueue function in the drivers/net/net Failover.c module of the Linux kernel network device driver is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the sfb_reset() function in the net/sched/sch_sfb.c module of the network/sched subsystem of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sfbReset function in the net/sched/schsfb.c module of the Linux operating system’s network/scheduling subsystem is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the microprogrammed software of the NovelSat NS2000 and NS3000 satellite demodulators lies in the lack of authentication for critical functions. This allows a hacker to alter user passwords or cause service failures.

The vulnerability of the microprogrammed satellite demodulators NovelSat NS2000 and NS3000 lies in the lack of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to alter user passwords or cause service failures...

The vulnerability of the tcp_disconnect() function in the net/ipv4/tcp.c module of the Linux operating system’s IPv4 protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tcpdisconnect function in the net/ipv4/tcp.c module of the Linux kernel’s IPv4 protocol implementation is related to improper release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the __unix_walk_scc() function in the net/unix/garbage.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the unixwalkscc function in the net/unix/garbage.c module, which is part of the Linux kernel’s networking functions, stems from the lack of initialization for a variable. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability in the `ge_b850v3_lvdsremove()` function of the driver module `/usr/sbin/drm/bridge/megachips-stdpxxxx-ge-b850v3-fw.c` of the Direct Rendering Infrastructure (DRI) kernel driver in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the geb850v3lvdsremove function in the drivers/gpu/drm/bridge/megachips-stdpxxxx-ge-b850v3-fw.c driver module of the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability could...

The vulnerability of the json.Unmarshal() function in the JSON-RPC protocol implementation of the MCP Go SDK allows attackers to bypass existing security mechanisms.

The vulnerability of the json.Unmarshal function in the JSON-RPC protocol implementation of the MCP Go SDK is related to deficiencies in the mechanism for processing register-dependent data. Exploiting this vulnerability allows a malicious actor to bypass existing security measures by sending...

The vulnerability of the opt3001_irq() function in the drivers/iio/light/opt3001.c file of the Linux kernel’s photodetection sensor driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the opt3001irq function in the drivers/iio/light/opt3001.c file of the Linux kernel’s photodetection sensor driver is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the hidp_set_timer() function in the net/bluetooth/hidp/core.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hidpsettimer function in the net/bluetooth/hidp/core.c module of the Linux kernel’s Bluetooth subsystem is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

The vulnerability of the hnae_ae_register() function in the drivers/net/ethernet/hisilicon/hns/hnae.c module of the Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hnaeaeregister function in the drivers/net/ethernet/hisilicon/hns/hnae.c module of the Ethernet network adapter driver for the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allo...

The vulnerability of the lpuart_dma_shutdown() function in the drivers/tty/serial/fsl_lpuart.c file of the console TTY driver in the Linux kernel’s parallel port allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the lpuartdmashutdown function in the drivers/tty/serial/fsllpuart.c module of the console TTY driver in the Linux kernel’s serial port layer is related to improper termination or release of resources. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the `nvmeTraceBioComplete()` function in the Linux kernel module allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the nvmeTraceBioComplete function in the Linux kernel module is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Active! mail client, related to the manipulation of cross-site requests, allows a perpetrator to carry out a CSRF attack.

The vulnerability of the mail client Active! is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

The vulnerability of the Tenda F3 router’s microprogramming software, related to the disclosure of information during data transmission, allows a intruder to gain unauthorized access to the protected information.

The vulnerability of the Tenda F3 router’s microprogramming software relates to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information during configuration loading...

The vulnerability of the exfat_find() function in the fs/exfat/namei.c file of the exFAT file system in the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the exfatfind function in the fs/exfat/namei.c file of the exFAT file system in Linux’s kernel is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...

The vulnerability of the mtk_vcodec_fw_scp_init() function in the driver/media/platform/mediatek/vcodec/common/mtk_vcodec_fw_scp.c file of the Linux kernel-based multimedia device support driver allows a attacker to cause a service failure.

The vulnerability of the mtkvcodecfwscpinit function in the driver/media/platform/mediatek/vcodec/common/mtkvcodecfwscp.c file of the Linux kernel multimedia device support driver is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failu...

The vulnerability of the Jupyter page in the JetBrains PyCharm integrated development environment allows attackers to perform cross-site scripting attacks.

The vulnerability of the Jupyter page in the JetBrains PyCharm integrated development environment is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform XSS attacks remotely...

The vulnerability of the Odoo Community Edition CRM system and the Odoo Enterprise Edition ERP system, related to lack of access control, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the CRM system Odoo Community Edition and the ERP system Odoo Enterprise Edition is related to deficiencies in access control. Exploiting these vulnerabilities can allow unauthorized individuals to gain unauthorized access to protected information...

The vulnerability of the find_and_map_user_pages() function in the drivers/accel/qaic/qaic_control.c file of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the findandmapuserpages function in the Linux kernel’s drivers/accel/qaic/qaiccontrol.c file is related to incorrect validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gpiolib_seq_stop() function in the drivers/gpio/gpiolib.c file of the Linux kernel’s GPIO driver allows a hacker to cause a service failure.

The vulnerability of the gpiolibseqstop function in the drivers/gpio/gpiolib.c file of the Linux GPIO driver kernel module relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of Microprogrammed Software in ExaGrid backup devices, related to information disclosure, allows attackers to gain access to the protected information.

The vulnerability of ExaGrid backup device’s microprogramming software is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the protected information...

The vulnerability of the sk_stream_kill_queues() function in the net/core/stream.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the skstreamkillqueues function in the net/core/stream.c module of the Linux kernel’s networking functions is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the kgd2kfdinterruptive() function in the drivers/gpu/drm/amd/amdkfd/kfd_device.c file of the Direct Rendering Infrastructure (DRI) driver for AMD graphics cards in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the kgd2kfdinterrupt function in the drivers/gpu/drm/amd/amdkfd/kfddevice.c file, a driver for the Direct Rendering Infrastructure DRI of AMD graphics cards in Linux operating systems, is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow...

The vulnerability of the hsr_get_untagged_frame() function in the net/hsr/hsr_forward.c module, a Linux kernel networking function implementation, allows a hacker to cause a service failure.

The vulnerability of the hsrgetuntaggedframe function in the net/hsr/hsrforward.c module, which is part of the networking functions in the Linux kernel, relates to the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the lpfcdebugfs_lockstat_write() function in the drivers/scsi/lpfc/lpfcdebugfs.c driver of the Linux SCSI device kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the lpfcdebugfslockstatwrite function in the drivers/scsi/lpfc/lpfcdebugfs.c driver for Linux SCSI devices is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

The vulnerability of the detect_stream_formats() function in the sound subsystem of the Linux operating system’s kernel, which allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the detectstreamformats function in the sound/firewire/dice/dice-extension.c module of the Linux kernel’s sound subsystem is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

The vulnerability of the AuthContext token in Philips IntelliSpace Cardiovascular’s image and data management system, due to deficiencies in the authentication process, allows attackers to manipulate the confidentiality and integrity of the protected information.

The vulnerability of the AuthContext token in Philips IntelliSpace Cardiovascular’s image and data management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow attackers to compromise the confidentiality and integrity of the protected...

The vulnerability of the formWebTypeLibrary() function in the httpd component of the Tenda F453 microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the formWebTypeLibrary function in the httpd component of the Tenda F453 microprogramming system for routers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the ath11k_peer_rx_frag_setup() function in the drivers/net/wireless/ath/ath11k/dp_rx.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ath11kpeerrxfragsetup function in the drivers/net/wireless/ath/ath11k/dprx.c file of the Atheros/Qualcomm wireless adapter driver in the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability...

The vulnerability of the hci_conn_add_sysfs() function in the net/bluetooth/hci_sysfs.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hciconnaddsysfs function in the net/bluetooth/hcisysfs.c module of the Linux kernel’s Bluetooth subsystem is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the VM_MERGEABLE macro definition in the include/linux/mm.h module of the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the VMMERGEABLE macro definition in the include/linux/mm.h module of the Linux operating system’s kernel is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the BPF_CALL_2() function in the net/core/filter.c module allows a hacker to compromise the privacy, integrity, and accessibility of the protected information within the Linux operating system’s kernel network functions.

The vulnerability of the BPFCALL2 function in the net/core/filter.c module related to Linux’s kernel network functions involves unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

The vulnerability of the set_user_sq_size() function in the drivers/infiniband/hw/mlx4/qp.c module of the Linux operating system’s kernel driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setusersqsize function in the drivers/infiniband/hw/mlx4/qp.c module of the Linux operating system’s kernel driver is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the crypto_core_ed25519_is_valid_point() function in the cryptographic library libsodium, which allows a hacker to execute arbitrary code.

The vulnerability of the cryptocoreed25519isvalidpoint function in the cryptographic library libsodium is related to the use of an incomplete black list. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

The vulnerability of the telnetd server of the inetutils network programming package allows a hacker to elevate their privileges to the root level.

The vulnerability of the telnetd server in the inetutils network programming package is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a attacker to elevate their privileges to the root level...

The vulnerability of the fromDhcpListClient() function in the Tenda F453 router software allows a hacker to execute arbitrary code.

The vulnerability of the fromDhcpListClient function in the Tenda F453 router’s microprogramming software is related to the copying of buffers without checking the size of the input data when processing the page parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of TP-Link’s mobile applications stems from improper verification of certificate authenticity, allowing attackers to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of TP-Link mobile applications is related to improper verification of certificate authenticity. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the centralized network management system Cisco Catalyst SD-WAN Manager, related to errors in the use of privileged application programming interfaces (APIs), allows a perpetrator to escalate their privileges.

The vulnerability of the centralized network management system, Cisco Catalyst SD-WAN Manager, is related to errors that occur when privileged application programming interfaces APIs are used. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Connection::handleWriteResponse() function in the src/http/Connection.C module of the web server wt allows an attacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the Connection::handleWriteResponse function in the src/http/Connection.C module of the web server allows for the reuse of previously freed memory. Exploiting this vulnerability could enable a malicious actor to compromise the confidentiality and accessibility of the protecte...

The vulnerability of the sk_stream_wait_memory() function in the net/core/stream.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the skstreamwaitmemory function in the net/core/stream.c module, which is part of the Linux kernel’s networking functions, relates to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the lpfc_cmpl_ct_cmd_gft_id() function in the drivers/scsi/lpfc/lpfc_ct.c file of the Linux operating system’s SCSI device driver allows a hacker to cause a service failure.

The vulnerability of the lpfccmplctcmdgftid function in the drivers/scsi/lpfc/lpfcct.c file of the Linux SCSI device driver kernel module is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the nbd_start_device_ioctl() function in the drivers/block/nbd.c module of the Linux kernel’s block devices driver allows a attacker to cause a service failure.

The vulnerability of the nbdstartdeviceioctl function in the drivers/block/nbd.c module of the Linux kernel’s block devices driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the qm_get_qos_value() function in the drivers/crypto/hisilicon/qm.c module of the Linux kernel cryptographic accelerator driver allows a hacker to cause a service failure.

The vulnerability of the qmgetqosvalue function in the drivers/crypto/hisilicon/qm.c module of the Linux kernel’s cryptographic accelerator driver is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the `btrfs_partially_delete_raid_extent()` function in the fs/btrfs/raid-stripe-tree.c module, which is part of the Btrfs file system support in Linux kernels, allows a attacker to cause a service failure.

The vulnerability of the btrfspartiallydeleteraidextent function in the fs/btrfs/raid-stripe-tree.c module of the btrfs file system support module in Linux is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to trigger a...

The vulnerability of iOS, MacOS, and iPadOS operating systems, related to uncontrolled resource consumption, allows attackers to trigger service interruptions.

The vulnerabilities of iOS, MacOS, and iPadOS are related to uncontrolled resource consumption. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...

The vulnerability of the MacOS operating system, related to the disclosure of information through registration files, allows a perpetrator to gain unauthorized access to the protected location information.

The vulnerability of the MacOS operating system is related to the disclosure of information through registration files. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the protected location information...

The vulnerability of the monitoring tool for VMware Aria Operations, related to the lack of protective measures for the website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the monitoring tool for VMware Aria Operations relates to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the DeleteMac function in the /cgi-bin/wireless.cgi script of the Wavlink router software, which allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the DeleteMac function in the /cgi-bin/wireless.cgi script of the Wavlink WL-WN579A3 router software is related to the lack of data cleaning measures at the control level when processing the deletelist parameter results. Exploiting this vulnerability could allow an attacker t...

The vulnerability of the sub_401218 function in the /cgi-bin/nas.cgi script of the Wavlink WL-NU516U1 wireless USB printer software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sub401218 function in the /cgi-bin/nas.cgi script of the Wavlink WL-NU516U1 wireless USB printer software is related to the output of operations that go beyond the buffer in memory when processing the User1Passwd parameter. Exploiting this vulnerability could allow an...