The vulnerability of the DeleteMac function in the /cgi-bin/wireless.cgi script of the Wavlink router software, which allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the DeleteMac function in the /cgi-bin/wireless.cgi script of the Wavlink WL-WN579A3 router software is related to the lack of data cleaning measures at the control level when processing the deletelist parameter results. Exploiting this vulnerability could allow an attacker t...

The vulnerability of function sub_40785C in the script /cgi-bin/adm.cgi of the wireless USB printer software Wavlink WL-NU516U1 allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of function sub40785C in the /cgi-bin/adm.cgi script of the Wavlink WL-NU516U1 wireless USB printer software is related to the output of operations that go beyond the buffer in memory when processing the timezone parameter. Exploiting this vulnerability could allow an attacker t...

The vulnerabilities of the functions cnl_ipc4_irq_thread() and cnl_ipc_irq_thread() in the sound/soc/sof/intel/cnl.c module, which are part of the Linux SoC audio support, allow a malicious actor to cause system failures.

The vulnerability of the functions cnlipc4irqthread and cnlipcirqthread in the sound/soc/sof/intel/cnl.c module, which is part of the Linux SoC audio support, relates to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the nbd_start_device_ioctl() function in the drivers/block/nbd.c module of the Linux kernel’s block devices driver allows a attacker to cause a service failure.

The vulnerability of the nbdstartdeviceioctl function in the drivers/block/nbd.c module of the Linux kernel’s block devices driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerabilities of functions exynos_ufs_shareability() and exynos_ufs_parse_dt() in the UFS-host controller support module drivers/ufs/host/ufs-exynos.c of the Linux operating system’s kernel allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of functions exynosufsshareability and exynosufsparsedt in the UFS-host controller support module drivers/ufs/host/ufs-exynos.c related to Linux kernel’s UFS Universal Flash Storage are due to improper disabling or release of resources. Exploiting these vulnerabilities could...

The vulnerability of the fromDhcpListClient() function in the Tenda F453 router software allows a hacker to execute arbitrary code.

The vulnerability of the fromDhcpListClient function in the Tenda F453 router’s microprogramming software is related to the copying of buffers without checking the size of the input data when processing the page parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of iOS, MacOS, and iPadOS operating systems, related to uncontrolled resource consumption, allows attackers to trigger service interruptions.

The vulnerabilities of iOS, MacOS, and iPadOS are related to uncontrolled resource consumption. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...

The vulnerability of the MacOS operating system, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure.

The vulnerability of the MacOS operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a hacker to cause service failures...

Vulnerability of iOS and iPadOS operating systems, related to improper handling of exception states, allows attackers to gain unauthorized access to protected information.

The vulnerability of iOS and iPadOS operating systems is related to improper handling of exceptional states. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the MacOS operating system, related to the disclosure of information through registration files, allows a perpetrator to gain unauthorized access to the protected location information.

The vulnerability of the MacOS operating system is related to the disclosure of information through registration files. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the protected location information...

The vulnerability of the centralized network management system Cisco Catalyst SD-WAN Manager, related to errors in the use of privileged application programming interfaces (APIs), allows a perpetrator to escalate their privileges.

The vulnerability of the centralized network management system, Cisco Catalyst SD-WAN Manager, is related to errors that occur when privileged application programming interfaces APIs are used. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the centralized network management system Cisco Catalyst SD-WAN Manager, related to insufficient protection of operational data, allows a hacker to disclose protected information.

The vulnerability of the centralized network management system, Cisco Catalyst SD-WAN Manager, is related to insufficient protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected by this system...

The vulnerability of the monitoring tool for VMware Aria Operations, related to deficiencies in access control, allows a perpetrator to escalate their privileges.

The vulnerability of the monitoring tool for VMware Aria Operations is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Connection::handleWriteResponse() function in the src/http/Connection.C module of the web server wt allows an attacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the Connection::handleWriteResponse function in the src/http/Connection.C module of the web server allows for the reuse of previously freed memory. Exploiting this vulnerability could enable a malicious actor to compromise the confidentiality and accessibility of the protecte...

The vulnerability of the sk_stream_wait_memory() function in the net/core/stream.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the skstreamwaitmemory function in the net/core/stream.c module, which is part of the Linux kernel’s networking functions, relates to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the rtas_os_term() function in the arch/powerpc/kernel/rtas.c module of the PowerPC platform’s Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rtasosterm function in the arch/powerpc/kernel/rtas.c module of the PowerPC platform support for the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the AI-based training platform OpenSift, related to the lack of measures taken to protect the structure of web pages, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the OpenSift AI training automation platform relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the niu_try_msix() function in the drivers/net/ethernet/sun/niu.c module of the Linux kernel’s Ethernet network adapter support driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the niutrymsix function in the drivers/net/ethernet/sun/niu.c module of the Linux kernel’s Ethernet adapter support driver is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the sub_401218 function in the /cgi-bin/nas.cgi script of the Wavlink WL-NU516U1 wireless USB printer software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sub401218 function in the /cgi-bin/nas.cgi script of the Wavlink WL-NU516U1 wireless USB printer software is related to the output of operations that go beyond the buffer in memory when processing the User1Passwd parameter. Exploiting this vulnerability could allow an...

The vulnerability of the amdgpu_bo_validate_size() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_object.c source file of the AMD GPU kernel for Linux’ Direct Rendering Infrastructure (DRI) driver architecture allows a attacker to cause a system failure.

The vulnerability of the amdgpubovalidatesize function in the drivers/gpu/drm/amd/amdgpu/amdgpuobject.c source file of the AMD GPU kernel for Linux Direct Rendering Infrastructure DRI driver architecture is related to the access to an uninitialized pointer. Exploiting this vulnerability could all...

The vulnerabilities of the functions hda_dsp_ipc4_irq_thread() and hda_dsp_ipc_irq_thread() in the sound/soc/sof/intel/hda-ipc.c file, which are part of the sound support for Linux SoC kernels, allow attackers to cause system failures.

The vulnerability of the functions hdadspipc4irqthread and hdadspipcirqthread in the sound/soc/sof/intel/hda-ipc.c file, which is part of the Linux operating system’s SoC audio support module, relates to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the qm_get_qos_value() function in the drivers/crypto/hisilicon/qm.c module of the Linux kernel cryptographic accelerator driver allows a hacker to cause a service failure.

The vulnerability of the qmgetqosvalue function in the drivers/crypto/hisilicon/qm.c module of the Linux kernel’s cryptographic accelerator driver is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the `btrfs_partially_delete_raid_extent()` function in the fs/btrfs/raid-stripe-tree.c module, which is part of the Btrfs file system support in Linux kernels, allows a attacker to cause a service failure.

The vulnerability of the btrfspartiallydeleteraidextent function in the fs/btrfs/raid-stripe-tree.c module of the btrfs file system support module in Linux is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to trigger a...

The vulnerability of the centralized network management system of Cisco Catalyst SD-WAN Manager and the software for traffic management of Cisco Catalyst SD-WAN Controller, due to authentication mechanism flaws, allows attackers to gain unauthorized access to the system.

The vulnerability of the centralized network management system Cisco Catalyst SD-WAN Manager and the software for traffic management called Cisco Catalyst SD-WAN Controller is related to authentication mechanism flaws. Exploiting this vulnerability could allow an attacker to gain unauthorized...

Vulnerability of iOS and iPadOS operating systems, related to improper authentication, allows attackers to gain unauthorized access to protected information.

The vulnerability of iOS and iPadOS operating systems is related to improper authentication. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of the blk_mq_register_hctx() function in the block/blk-mq-sysfs.c module, which is part of the Linux kernel’s block-level support, allows a attacker to cause a service failure.

The vulnerability of the blkmqregisterhctx function in the block/blk-mq-sysfs.c module, which supports the block-level kernel in Linux operating systems, is related to improper memory release memory leak. Exploiting this vulnerability may allow an attacker to cause a system failure...

The vulnerability of the add_all_parents() function in the fs/btrfs/backref.c file of the btrfs file system in the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the addallparents function in the fs/btrfs/backref.c file of the btrfs file system in the Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the AddMac function in the /cgi-bin/wireless.cgi script of the Wavlink router microprogramming system, which allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the AddMac function in the /cgi-bin/wireless.cgi script of the Wavlink WL-WN579A3 router software is related to the lack of data cleaning measures at the management level when processing the macAddr parameter. Exploiting this vulnerability allows an attacker to compromise the...

The vulnerability of the online service for managing laundry services, related to the manipulation of cross-site requests, allows a perpetrator to carry out a CSRF attack.

The vulnerability of the online service for managing laundry services is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

The vulnerability of the loop_set_status_from_info() function in the drivers/block/loop.c module of the Linux kernel’s block devices driver allows a attacker to cause a service failure.

The vulnerability of the loopsetstatusfrominfo function in the drivers/block/loop.c module of the Linux kernel’s block devices driver is related to the execution of operations outside of the memory buffer. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the ext4_resize_fs() function in the fs/ext4/resize.c file of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4resizefs function in the fs/ext4/resize.c file of the Ext4 file system in the Linux operating system is related to the execution of a loop without sufficient limitation on its execution count. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerabilities of the functions extAlloc() and extRecord() in the JFS file system module fs/jfs/jfs_extent.c of the Linux operating system’s kernel allow a hacker to cause a service failure.

The vulnerability of the extAlloc and extRecord functions in the JFS file system module fs/jfs/jfsextent.c of the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an...

The vulnerability of iOS, MacOS, and iPadOS operating systems, related to the operation beyond the memory buffer boundaries, allows attackers to trigger a service failure.

The vulnerability of iOS, MacOS, and iPadOS operating systems is related to the execution of operations beyond the boundaries of memory buffers. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the mlx5e_priv module’s structure in the drivers/net/ethernet/mellanox/mlx5/core/en.h file of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the mlx5epriv module’s drivers/net/ethernet/mellanox/mlx5/core/en.h file in the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerabilities of the functions sg_read() and sg_get_rq_mark() in the drivers/scsi/sg.c module of the Linux operating system’s SCSI device driver, which allow a hacker to cause a service failure.

The vulnerabilities of the functions sgread and sggetrqmark in the drivers/scsi/sg.c module of the Linux SCSI device driver are related to premature release of resources during their operation. Exploiting these vulnerabilities could allow an attacker to cause service failures...

The vulnerability of the vmx_init() function in the arch/x86/kvm/vmx/vmx.c file of the virtualization subsystem on the x86 kernel-based Linux operating system allows a hacker to cause a service failure.

The vulnerability of the vmxinit function in the arch/x86/kvm/vmx/vmx.c file of the virtualization subsystem on the x86 kernel of the Linux operating system is related to the pointer swapping mechanism. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the btrfs DropExtents() function in the fs/btrfs/file.c file of the file system in Linux kernel allows a attacker to cause a service failure.

The vulnerability of the btrfs DropExtents function in the fs/btrfs/file.c file of the btrfs file system in Linux kernels is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the tsi148_dma_list_add() function in the drivers/staging/vme_user/vme_tsi148.c module allows a hacker to trigger a service failure.

The vulnerability of the tsi148dmalistadd function in the drivers/staging/vmeuser/vmetsi148.c module, which supports additional devices in the Linux operating system’s kernel, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to caus...

The vulnerability of the stmmac_request_irq_multi_msi() function in the drivers/net/ethernet/stmicro/stmmac/stmmac_main.c file of the Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the stmmacrequestirqmultimsi function in the drivers/net/ethernet/stmicro/stmmac/stmmacmain.c file of the Ethernet network adapter driver for the Linux operating system from STMicroelectronics is related to the reutilization of previously freed memory. Exploiting this...

The vulnerability of the monitoring tool for VMware Aria Operations, related to the failure to take measures to neutralize specific elements, allows a perpetrator to execute arbitrary code.

The vulnerability of the monitoring tool for VMware Aria Operations relates to the failure to take measures to neutralize specific elements. Exploiting this vulnerability may allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the ftrace_startup() function in the kernel/trace/ftrace.c module, which is part of the Linux operating system’s tracing support, allows a malicious actor to cause a service failure.

The vulnerability of the ftracestartup function in the kernel/trace/ftrace.c module, which is part of Linux’s kernel-level tracing support, involves pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the ext2_setsize() function in the fs/ext2/inode.c module of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext2setsize function in the fs/ext2/inode.c module of the Linux kernel file system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the hidraw_release() function in the drivers/hid/hidraw.c module of the Linux kernel’s device subsystem allows a hacker to trigger a service failure.

The vulnerability of the hidrawrelease function in the drivers/hid/hidraw.c module of the Linux kernel’s device subsystem driver involves improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

Vulnerability of the MarkdownRenderer.jsx component in large language models (LLMs). A new API that allows attackers to perform cross-site scripting attacks.

The vulnerability of the MarkdownRenderer.jsx component in large language models LLMs is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform XSS attacks remotely...

The vulnerability of the mceusb_gen1_init() function in the drivers/media/rc/mceusb.c file of the Linux kernel’s multimedia device driver allows a hacker to cause a service failure.

The vulnerability of the mceusbgen1init function in the drivers/media/rc/mceusb.c file of the Linux kernel’s multimedia device driver is related to data processing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the init_cache_level() function in the arch/arm64/kernel/cacheinfo.c module, which is part of the ARM 64-bit kernel support in the Linux operating system, allows a attacker to cause a service failure.

The vulnerability of the initcachelevel function in the arch/arm64/kernel/cacheinfo.c module, which is part of the ARM 64-bit kernel support for Linux operating systems, is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of operating systems such as watchOS, tvOS, macOS, iOS, iPadOS, and visionOS, related to reading beyond the buffer limit of memory, allows attackers to trigger a service failure.

The vulnerabilities of operating systems such as watchOS, tvOS, macOS, iOS, iPadOS, and visionOS are related to reading data beyond the buffer limit of memory. Exploiting these vulnerabilities can allow attackers to cause system failures...

The vulnerability of the `gem_get_ethtool_stats()` function in the `drivers/net/ethernet/cadence/macb_main.c` kernel module allows a attacker to compromise the integrity, confidentiality, and accessibility of the protected information.

The vulnerability of the gemgetethtoolstats function in the drivers/net/ethernet/cadence/macbmain.c file of the Linux kernel is related to writing beyond the valid memory range. Exploiting this vulnerability could allow an attacker to compromise the integrity, confidentiality, and accessibility o...

The vulnerability of the Safari browser on iOS, iPadOS, macOS operating systems is related to improper authorization, allowing attackers to gain access to the browser’s history.

The vulnerability of the Safari browser on iOS, iPadOS, and macOS systems is related to improper authentication. Exploiting this vulnerability can allow attackers to gain access to the browser’s history...

The vulnerability of Microsoft Edge browser (based on Chromium) relates to deficiencies in access control for personal information, allowing attackers to disclose protected information.

The vulnerability of Microsoft Edge based on Chromium is related to deficiencies in access control for personal information. Exploiting this vulnerability can allow a malicious actor to disclose protected information from a remote location...