The vulnerability in the web interface for managing microprogramming router Tenda F3 allows a perpetrator to compromise the integrity of the protected information.

The vulnerability in the web interface for managing microprogramming router software Tenda F3 is related to incorrect restrictions on the visible layers or frames of the user interface. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected...

The vulnerability of the gf_list_get function in the MP4Box multimedia platform’s utility allows a hacker to cause a service failure.

The vulnerability of the gflistget function in the MP4Box multimedia platform of GPAC is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __unix_walk_scc() function in the net/unix/garbage.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the unixwalkscc function in the net/unix/garbage.c module, which is part of the Linux kernel’s networking functions, stems from the lack of initialization for a variable. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the TextEditingConversion() function in the microprogramming software for Tenda AC15 allows a hacker to execute arbitrary code.

The vulnerability of the TextEditingConversion function in the Tenda AC15 router’s microprogramming software is related to the operation of writing data outside the buffer in memory when processing the wpapskcrypto24g parameter. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of the io_link_skb() function in the io_uring/notif.c module of the Linux kernel’s asynchronous input/output interface allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iolinkskb function in the iouring/notif.c module of the Linux kernel’s asynchronous input/output interface is related to incorrect comparisons. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the net_failover_select_queue() function in the drivers/net/net Failover.c module of the Linux kernel network device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the net FailoverSelectQueue function in the drivers/net/net Failover.c module of the Linux kernel network device driver is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability in the `ge_b850v3_lvdsremove()` function of the driver module `/usr/sbin/drm/bridge/megachips-stdpxxxx-ge-b850v3-fw.c` of the Direct Rendering Infrastructure (DRI) kernel driver in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the geb850v3lvdsremove function in the drivers/gpu/drm/bridge/megachips-stdpxxxx-ge-b850v3-fw.c driver module of the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability could...

The vulnerability of the rtl8187_rx_cb() function in the driver/net/wireless/realtek/rtl818x/rtl8187/dev.c file of the wireless communication adapter driver developed by Realtek for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rtl8187rxcb function in the drivers/net/wireless/realtek/rtl818x/rtl8187/dev.c file of the wireless adapter driver module developed by Realtek for the Linux operating system is related to improper cleanup or release of resources. Exploiting this vulnerability could allow ...

The vulnerability of the io_init() function in the drivers/mtd/ubi/build.c file of the MTD memory driver for the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ioinit function in the drivers/mtd/ubi/build.c file of the MTD memory driver for the Linux operating system relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...

The vulnerability of the microprogrammed software of the NovelSat NS2000 and NS3000 satellite demodulators lies in the lack of authentication for critical functions. This allows a hacker to alter user passwords or cause service failures.

The vulnerability of the microprogrammed satellite demodulators NovelSat NS2000 and NS3000 lies in the lack of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to alter user passwords or cause service failures...

The vulnerability of the fromSafeEmailFilter() function in the httpd component of the Tenda F453 microprogramming system of routers allows a hacker to execute arbitrary code.

The vulnerability of the fromSafeEmailFilter function in the httpd component of the Tenda F453 microprogramming system for routers involves an escape operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the svm_range_restore_pages() function in the driver/gpu/drm/amd/amdkfd/kfd_svm.c file of the DRI graphics hardware driver for AMD processors in Linux operating systems allows a malicious actor to cause service failure.

The vulnerability of the svmrangerestorepages function in the driver/gpu/drm/amd/amdkfd/kfdsvm.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to the improper disabling or release of resources. Exploiting this vulnerability may...

The vulnerability of the damon_reclaim_apply_parameters() function in the mm/damon/reclaim.c module of the Linux kernel’s memory management subsystem allows a hacker to trigger a service failure.

The vulnerability of the damonreclaimapplyparameters function in the mm/damon/reclaim.c module, a memory management subsystem of the Linux operating system, is related to insufficient validation of input data during division by zero. Exploiting this vulnerability could allow an attacker to trigge...

The vulnerability of the tcp_disconnect() function in the net/ipv4/tcp.c module of the Linux operating system’s IPv4 protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tcpdisconnect function in the net/ipv4/tcp.c module of the Linux kernel’s IPv4 protocol implementation is related to improper release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the fromRouteStatic() function in the httpd component of the Tenda F453 microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the fromRouteStatic function in the httpd component of the Tenda F453 microprogramming system for routers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the fromNatStaticSetting() function in the httpd component of the Tenda F453 microprogramming system of routers allows a attacker to execute arbitrary code.

The vulnerability of the fromNatStaticSetting function in the httpd component of the Tenda F453 microprogramming system for routers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the BPF_CALL_2() function in the net/core/filter.c module allows a hacker to compromise the privacy, integrity, and accessibility of the protected information within the Linux operating system’s kernel network functions.

The vulnerability of the BPFCALL2 function in the net/core/filter.c module related to Linux’s kernel network functions involves unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

The vulnerability of the VM_MERGEABLE macro definition in the include/linux/mm.h module of the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the VMMERGEABLE macro definition in the include/linux/mm.h module of the Linux operating system’s kernel is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the mtk_vcodec_fw_scp_init() function in the driver/media/platform/mediatek/vcodec/common/mtk_vcodec_fw_scp.c file of the Linux kernel-based multimedia device support driver allows a attacker to cause a service failure.

The vulnerability of the mtkvcodecfwscpinit function in the driver/media/platform/mediatek/vcodec/common/mtkvcodecfwscp.c file of the Linux kernel multimedia device support driver is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failu...

The vulnerability of the opt3001_irq() function in the drivers/iio/light/opt3001.c file of the Linux kernel’s photodetection sensor driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the opt3001irq function in the drivers/iio/light/opt3001.c file of the Linux kernel’s photodetection sensor driver is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of Microprogrammed Software in ExaGrid backup devices, related to information disclosure, allows attackers to gain access to the protected information.

The vulnerability of ExaGrid backup device’s microprogramming software is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the protected information...

The vulnerability of the hidp_set_timer() function in the net/bluetooth/hidp/core.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hidpsettimer function in the net/bluetooth/hidp/core.c module of the Linux kernel’s Bluetooth subsystem is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

The vulnerability of the detect_stream_formats() function in the sound subsystem of the Linux operating system’s kernel, which allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the detectstreamformats function in the sound/firewire/dice/dice-extension.c module of the Linux kernel’s sound subsystem is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

The vulnerability of the hnae_ae_register() function in the drivers/net/ethernet/hisilicon/hns/hnae.c module of the Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hnaeaeregister function in the drivers/net/ethernet/hisilicon/hns/hnae.c module of the Ethernet network adapter driver for the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allo...

The vulnerability of the lpuart_dma_shutdown() function in the drivers/tty/serial/fsl_lpuart.c file of the console TTY driver in the Linux kernel’s parallel port allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the lpuartdmashutdown function in the drivers/tty/serial/fsllpuart.c module of the console TTY driver in the Linux kernel’s serial port layer is related to improper termination or release of resources. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the Jupyter page in the JetBrains PyCharm integrated development environment allows attackers to perform cross-site scripting attacks.

The vulnerability of the Jupyter page in the JetBrains PyCharm integrated development environment is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform XSS attacks remotely...

The vulnerability of the Active! mail client, related to the manipulation of cross-site requests, allows a perpetrator to carry out a CSRF attack.

The vulnerability of the mail client Active! is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

The vulnerability of the Tenda F3 router’s microprogramming software, related to the disclosure of information during data transmission, allows a intruder to gain unauthorized access to the protected information.

The vulnerability of the Tenda F3 router’s microprogramming software relates to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information during configuration loading...

The vulnerability of the crypto_core_ed25519_is_valid_point() function in the cryptographic library libsodium, which allows a hacker to execute arbitrary code.

The vulnerability of the cryptocoreed25519isvalidpoint function in the cryptographic library libsodium is related to the use of an incomplete black list. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

The vulnerability of the kgd2kfdinterruptive() function in the drivers/gpu/drm/amd/amdkfd/kfd_device.c file of the Direct Rendering Infrastructure (DRI) driver for AMD graphics cards in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the kgd2kfdinterrupt function in the drivers/gpu/drm/amd/amdkfd/kfddevice.c file, a driver for the Direct Rendering Infrastructure DRI of AMD graphics cards in Linux operating systems, is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow...

The vulnerability of the json.Unmarshal() function in the JSON-RPC protocol implementation of the MCP Go SDK allows attackers to bypass existing security mechanisms.

The vulnerability of the json.Unmarshal function in the JSON-RPC protocol implementation of the MCP Go SDK is related to deficiencies in the mechanism for processing register-dependent data. Exploiting this vulnerability allows a malicious actor to bypass existing security measures by sending...

The vulnerability of the hsr_get_untagged_frame() function in the net/hsr/hsr_forward.c module, a Linux kernel networking function implementation, allows a hacker to cause a service failure.

The vulnerability of the hsrgetuntaggedframe function in the net/hsr/hsrforward.c module, which is part of the networking functions in the Linux kernel, relates to the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the sk_stream_kill_queues() function in the net/core/stream.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the skstreamkillqueues function in the net/core/stream.c module of the Linux kernel’s networking functions is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the lpfcdebugfs_lockstat_write() function in the drivers/scsi/lpfc/lpfcdebugfs.c driver of the Linux SCSI device kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the lpfcdebugfslockstatwrite function in the drivers/scsi/lpfc/lpfcdebugfs.c driver for Linux SCSI devices is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

The vulnerability of the set_user_sq_size() function in the drivers/infiniband/hw/mlx4/qp.c module of the Linux operating system’s kernel driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setusersqsize function in the drivers/infiniband/hw/mlx4/qp.c module of the Linux operating system’s kernel driver is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the ath11k_peer_rx_frag_setup() function in the drivers/net/wireless/ath/ath11k/dp_rx.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ath11kpeerrxfragsetup function in the drivers/net/wireless/ath/ath11k/dprx.c file of the Atheros/Qualcomm wireless adapter driver in the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability...

The vulnerability of the `nvmeTraceBioComplete()` function in the Linux kernel module allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the nvmeTraceBioComplete function in the Linux kernel module is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the hci_conn_add_sysfs() function in the net/bluetooth/hci_sysfs.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hciconnaddsysfs function in the net/bluetooth/hcisysfs.c module of the Linux kernel’s Bluetooth subsystem is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the exfat_find() function in the fs/exfat/namei.c file of the exFAT file system in the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the exfatfind function in the fs/exfat/namei.c file of the exFAT file system in Linux’s kernel is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...

The vulnerability of the find_and_map_user_pages() function in the drivers/accel/qaic/qaic_control.c file of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the findandmapuserpages function in the Linux kernel’s drivers/accel/qaic/qaiccontrol.c file is related to incorrect validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gpiolib_seq_stop() function in the drivers/gpio/gpiolib.c file of the Linux kernel’s GPIO driver allows a hacker to cause a service failure.

The vulnerability of the gpiolibseqstop function in the drivers/gpio/gpiolib.c file of the Linux GPIO driver kernel module relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the telnetd server of the inetutils network programming package allows a hacker to elevate their privileges to the root level.

The vulnerability of the telnetd server in the inetutils network programming package is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a attacker to elevate their privileges to the root level...

The vulnerability of the Odoo Community Edition CRM system and the Odoo Enterprise Edition ERP system, related to lack of access control, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the CRM system Odoo Community Edition and the ERP system Odoo Enterprise Edition is related to deficiencies in access control. Exploiting these vulnerabilities can allow unauthorized individuals to gain unauthorized access to protected information...

The vulnerability of the AuthContext token in Philips IntelliSpace Cardiovascular’s image and data management system, due to deficiencies in the authentication process, allows attackers to manipulate the confidentiality and integrity of the protected information.

The vulnerability of the AuthContext token in Philips IntelliSpace Cardiovascular’s image and data management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow attackers to compromise the confidentiality and integrity of the protected...

The vulnerability of the formWebTypeLibrary() function in the httpd component of the Tenda F453 microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the formWebTypeLibrary function in the httpd component of the Tenda F453 microprogramming system for routers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the rcu_assign_sk_user_data_nocopy() macro definition in the include/net/sock.h file, which is part of the networking function support in the Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the rcuassignskuserdatanocopy macro definition in the include/net/sock.h file, which is part of the Linux kernel’s networking support functions, is related to errors during the update of the reference counters. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of TP-Link’s mobile applications stems from improper verification of certificate authenticity, allowing attackers to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of TP-Link mobile applications is related to improper verification of certificate authenticity. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the ogs_gtp2_parse_tft function in the SMF component, which is used for creating and managing NR/LTE Open5GS mobile networks, allows a attacker to cause a service failure.

The vulnerability of the ogsgtp2parsetft function in the SMF component, which is used for creating and managing NR/LTE Open5GS mobile networks, is related to improper cleaning or release of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the monitoring tool for VMware Aria Operations, related to the lack of protective measures for the website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the monitoring tool for VMware Aria Operations relates to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the lpfc_cmpl_ct_cmd_gft_id() function in the drivers/scsi/lpfc/lpfc_ct.c file of the Linux operating system’s SCSI device driver allows a hacker to cause a service failure.

The vulnerability of the lpfccmplctcmdgftid function in the drivers/scsi/lpfc/lpfcct.c file of the Linux SCSI device driver kernel module is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...