92710 matches found
The vulnerability in the web security configuration of TP-Link mobile applications allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of TP-Link’s mobile application web security configuration relates to the use of an untrusted interdomain policy file. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the set_machine_constraints() function in the drivers/regulator/core.c module of the Linux kernel’s voltage and current regulator driver allows a hacker to cause a service failure.
The vulnerability of the setmachineconstraints function in the drivers/regulator/core.c module of the Linux kernel’s voltage and current regulator driver is related to improper memory release „memory leak“. Exploiting this vulnerability could allow a attacker to cause a system failure...
The vulnerability of the usb_reset_device() function in the drivers/usb/core/hub.c file of the Linux kernel’s USB device driver allows a hacker to cause a service failure.
The vulnerability of the usbresetdevice function in the drivers/usb/core/hub.c file of the Linux kernel’s USB device driver module is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to cause a service failure...
The vulnerability of the alpine_msix_init_domains() function in the drivers/irqchip/irq-alpine-msi.c file of the Linux kernel’s IRQ chip driver allows a attacker to cause a service failure.
The vulnerability of the alpinemsixinitdomains function in the drivers/irqchip/irq-alpine-msi.c file of the Linux kernel’s IRQ driver module is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the msm_dsi_modeset_init() function in the driver/gpu/drm/msm/dsi/dsi.c file of the Direct Rendering Infrastructure (DRI) driver in the Linux operating system’s kernel allows a malicious actor to cause a service failure.
The vulnerability of the msmdsimodesetinit function in the driver/gpu/drm/msm/dsi/dsi.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the MacOS operating system, related to insecure management of privileges, allows a perpetrator to elevate their privileges to the root level.
The vulnerability of the MacOS operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...
Vulnerability of operating systems such as watchOS, tvOS, macOS, iOS, iPadOS, and visionOS, related to reading beyond the buffer of memory, allowing attackers to disclose protected information
The vulnerabilities of operating systems such as watchOS, tvOS, macOS, iOS, iPadOS, and visionOS involve reading data beyond the buffer boundaries of memory. Exploiting these vulnerabilities can allow attackers to disclose sensitive information by processing specially created images...
Vulnerability of operating systems such as watchOS, tvOS, macOS, iOS, and iPadOS, due to insecure temporary files, allows attackers to expose sensitive information.
Vulnerabilities of operating systems such as watchOS, tvOS, macOS, iOS, and iPadOS are related to insecure temporary files. Exploiting these vulnerabilities can allow a malicious actor to disclose sensitive information...
The vulnerability of function sub_406194 in the script /cgi-bin/adm.cgi of the wireless USB printer software Wavlink WL-NU516U1 allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of function sub406194 in the script /cgi-bin/adm.cgi of the wireless USB printer software Wavlink WL-NU516U1 is related to the output of operations that go beyond the buffer in memory when processing the firmwareurl parameter. Exploiting this vulnerability allows an attacker to...
The vulnerability of the ext4_clu_mapped() function in the fs/ext4/extents.c file of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the ext4clumapped function in the fs/ext4/extents.c file of the Ext4 file system in the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the pvr2_hdw_create() function in the driver/media/usb/pvrusb2/pvrusb2-hdw.c file of the Linux operating system’s multimedia device driver, which allows a hacker to cause a service failure.
The vulnerability of the pvr2hdwcreate function in the drivers/media/usb/pvrusb2/pvrusb2-hdw.c file of the Linux operating system’s multimedia device driver framework is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the mtk_vdec_worker() function in the drivers/media/platform/mediatek/vcodec/mtk_vcodec_dec_stateless.c driver for multimedia devices in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the mtkvdecworker function in the drivers/media/platform/mediatek/vcodec/mtkvcodecdecstateless.c driver for multimedia devices in the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a...
The vulnerability of the MacOS operating system, related to the exposure of information, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the MacOS operating system is related to the exposure of information. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
The vulnerability of the Data Collection Agent service in the Cisco Catalyst SD-WAN Manager centralized network management system allows a malicious actor to gain unauthorized access to protected information and enhance their privileges.
The vulnerability of the Data Collection Agent service in the Cisco Catalyst SD-WAN Manager centralized network management system is related to the storage of passwords in a recoverable format. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...
The vulnerability of the centralized network management system Cisco Catalyst SD-WAN Manager, due to deficiencies in authentication procedures, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the centralized network management system Cisco Catalyst SD-WAN Manager is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information by sending specially crafted...
The vulnerability of the Data Collection Agent service in the Cisco Catalyst SD-WAN Manager centralized network management system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Data Collection Agent service in the Cisco Catalyst SD-WAN Manager centralized network management system is related to errors when privileged application programming interfaces APIs are used. Exploiting this vulnerability could allow a malicious actor to gain unauthorized...
The vulnerability of the gaudi_parse_cb_no_ext_queue() function in the drivers/misc/habanalabs/gaudi/gaudi.c module of the Linux kernel allows a malicious individual to gain unauthorized access to protected information.
The vulnerability of the gaudiparsecbnoextqueue function in the drivers/misc/habanalabs/gaudi/gaudi.c file of the Linux kernel is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to...
The vulnerability of the jfs_truncate_nolock() function in the fs/jfs/inode.c file of the JFS file system in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the jfstruncatenolock function in the fs/jfs/inode.c file of the JFS file system in Linux kernel is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the ipvlan_l3s_unregister() function in the drivers/net/ipvlan/ipvlan_l3s.c module of the Linux kernel-based network device driver framework allows a attacker to cause a service failure.
The vulnerability of the ipvlanl3sunregister function in the drivers/net/ipvlan/ipvlanl3s.c module of the Linux kernel-based network device driver framework is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the MacOS operating system, related to incorrect path name restrictions for restricted access directories, allows attackers to elevate their privileges to the root level.
The vulnerability of the MacOS operating system is related to incorrect restrictions on path names in restricted access directories. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...
The vulnerability of the MacOS operating system, related to errors with inherited permissions, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the MacOS operating system is related to errors with inherited permissions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Vulnerability of the validate_region_size() function in the drivers/md/dm-raid.c module – A driver for supporting multiple device types (RAID and LVM) in the Linux operating system. This function allows an attacker to access protected information or cause service failures.
Vulnerability of the validateregionsize function in the drivers/md/dm-raid.c module – The driver for supporting multiple device types RAID and LVM in the Linux operating system relies on buffer overflow attacks. Exploiting this vulnerability could allow an attacker to access protected information...
The vulnerability of the ext4_fc_replay_scan() function in the fs/ext4/fast_commit.c module of the Ext4 file system in the Linux operating system allows a attacker to access protected information or cause service failures.
The vulnerability of the ext4fcreplayscan function in the fs/ext4/fastcommit.c module of the Ext4 file system in the Linux operating system is related to buffer-overflow attacks. Exploiting this vulnerability can allow an attacker to access protected information or cause service failures...
The vulnerability of the crypt_message() function in the fs/cifs/smb2ops.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the cryptmessage function in the fs/cifs/smb2ops.c module of the Linux kernel is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the blockOperations() function in the fs/f2fs/checkpoint.c module of the Linux kernel’s F2FS file system allows a hacker to cause a system failure.
The vulnerability of the blockOperations function in the fs/f2fs/checkpoint.c module of the Linux kernel’s File System F2FS involves a lack of synchronization during the handling of general resources race conditions. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the ath11kpciprobe() function in the drivers/net/wireless/ath/ath11k/pci.c file of the Atheros/Qualcomm wireless communication adapter driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the ath11kpciprobe function in the drivers/net/wireless/ath/ath11k/pci.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to improper resource release. Exploiting this vulnerability could allow an attacker to cause a service failu...
The vulnerability of iOS and iPadOS operating systems, related to information disclosure, allows attackers to gain unauthorized access to protected information.
The vulnerability of iOS and iPadOS operating systems is related to the exposure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the raid_status() function in the drivers/md/dm-raid.c module of the Linux operating system’s device driver for multiple devices (RAID and LVM), which allows an attacker to access protected information or cause service failures.
The vulnerability of the raidstatus function in the drivers/md/dm-raid.c module of the Linux device driver for multiple devices RAID and LVM involves buffer overflow attacks. Exploiting this vulnerability can allow an attacker to access protected information or cause service failures...
The vulnerability of the rapl_compute_time_window_core() function in the drivers/powercap/intel_rapl_common.c file of the Linux kernel allows a hacker to access protected information or cause service failures.
The vulnerability of the raplcomputetimewindowcore function in the drivers/powercap/intelraplcommon.c file of the Linux kernel is related to the lack of checking for the returned value. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...
The vulnerability of the ufshcd_cmd_inflight() function in the drivers/ufs/core/ufshcd.c file affects UFS-host controller support in Linux operating systems. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ufshcdcmdinflight function in the drivers/ufs/core/ufshcd.c file affects UFS Universal Flash Storage host controllers. In Linux operating systems, this function is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow attackers to compromise...
The vulnerability of the ipgre_header() function in the net/ipv4/ip_gre.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the ipgreheader function in the net/ipv4/ipgre.c module of the Linux kernel is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the iomap_writepage_map() function in the fs/iomap/buffered-io.c file of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the iomapwritepagemap function in the fs/iomap/buffered-io.c file of the Linux kernel file system is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...
The vulnerability of the raid1_read_request() function in the drivers/md/raid1.c module of the Linux kernel support for multiple devices (RAID and LVM) allows a hacker to cause a service failure.
The vulnerability of the raid1readrequest function in the drivers/md/raid1.c module of the Linux kernel’s device drivers for RAID and LVM systems is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause service...
The vulnerability of the iwlagn_send_sta_key() function in the drivers/net/wireless/intel/iwlwifi/dvm/sta.c file of the Intel wireless driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the iwlagnsendstakey function in the drivers/net/wireless/intel/iwlwifi/dvm/sta.c file of the Intel wireless driver for the Linux operating system is related to a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerabilities of the functions confont_set() and confont_default() in the drivers/tty/vt/vt.c file of the Linux kernel’s console virtual terminal driver allow an attacker to access protected information or cause service failures.
The vulnerability of the confontset and confontdefault functions in the drivers/tty/vt/vt.c file of the Linux kernel’s console virtual terminal driver is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or cause...
The vulnerability of the putEntry() function in the security/selinux/ss/policydb.h module of the Linux kernel allows a attacker to gain access to protected information or cause service failures.
The vulnerability of the putentry function in the security/selinux/ss/policydb.h module of the Linux kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...
The vulnerability of the ismt_access() function in the drivers/i2c/busses/i2c-ismt.c module of the I2C driver for the Linux operating system’s hardware bus allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ismtaccess function in the drivers/i2c/busses/i2c-ismt.c module of the I2C driver for the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the k3_r5_cluster_of_init() function in the drivers/remoteproc/ti_k3_r5_remoteproc.c file of the Linux kernel subsystem for remote processors allows a attacker to cause a service failure.
The vulnerability of the k3r5clusterofinit function in the drivers/remoteproc/tik3r5remoteproc.c file of the Linux kernel subsystem for remote processors is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the iommudebugfs_add() function in the arch/powerpc/kernel/iommu.c module, which is part of the PowerPC platform support for the Linux operating system, allows a hacker to cause a service failure.
The vulnerability of the iommudebugfsadd function in the arch/powerpc/kernel/iommu.c module, which is part of the PowerPC platform support for the Linux operating system, is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system...
The vulnerability of the Eltex ECCM monitoring and control system arises from incorrect configuration of the server authentication for SFTP/SCP protocols. This allows attackers to gain unauthorized access to temporary configuration files and device software using an arbitrary public SSH key.
The vulnerability of the Eltex ECCM monitoring and configuration management system is related to incorrect authentication policies on the SFTP/SCP server. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to temporary configuration files and device software using ...
The vulnerability of the xfrm_alloc_spi() function in the net/xfrm/xfrm_state.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the xfrmallocspi function in the net/xfrm/xfrmstate.c module, which implements networking functions in the Linux kernel, is related to insufficient checks for data uniqueness during searches. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the ath5k_eeprom_convert_pcal_info_5111() function in the drivers/net/wireless/ath/ath5k/eeprom.c module – a driver for Atheros/Qualcomm wireless adapter support in Linux operating systems – allows an attacker to access protected information or cause service failure.
The vulnerability of the ath5keepromconvertpcalinfo5111 function in the drivers/net/wireless/ath/ath5k/eeprom.c module – a driver for Atheros/Qualcomm wireless adapter support in Linux operating systems – involves reading data beyond the buffer boundaries. Exploiting this vulnerability could allo...
The vulnerability of the raid10_remove_disk() function in the drivers/md/raid10.c file of the Linux device driver for multiple device types (RAID and LVM) allows a attacker to access protected information or cause service failure.
The vulnerability of the raid10removedisk function in the drivers/md/raid10.c file of the Linux device driver for multiple devices RAID and LVM involves buffer overflow attacks. Exploiting this vulnerability can allow an attacker to access protected information or cause service failures...
The vulnerability of the dbg_create_files() function in the drivers/usb/chipidea/debug.c module of the Linux kernel device driver for USB chips allows a hacker to cause a service failure.
The vulnerability of the dbgcreatefiles function in the drivers/usb/chipidea/debug.c file of the Linux kernel device driver for USB chipsets is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the link_status_user_format() function in the drivers/net/ethernet/marvell/octeontx2/af/cgx.c file of the Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the linkstatususerformat function in the drivers/net/ethernet/marvell/octeontx2/af/cgx.c file of the Ethernet network adapter driver for the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability could allow an attacker t...
The vulnerability of the new_lockspace() function in the fs/dlm/lockspace.c module, which is part of the Linux kernel’s distributed locking manager support, allows a attacker to cause a service failure.
The vulnerability of the newlockspace function in the fs/dlm/lockspace.c module, which is part of the Linux kernel’s distributed locking manager support, relates to the pointer dereferencing. Exploiting this vulnerability could allow an attacker to trigger a service failure...
The vulnerability of the sock_lock_init_class_and_name() function in the include/net/sock.h module of Linux’s kernel networking functions allows a attacker to cause a service failure.
The vulnerability of the socklockinitclassandname function in the include/net/sock.h module, which is part of Linux’s kernel networking functions, relates to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the ath11k_reg_notifier() function in the drivers/net/wireless/ath/ath11k/reg.c file of the Atheros/Qualcomm wireless communication adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ath11kregnotifier function in the drivers/net/wireless/ath/ath11k/reg.c file of the Atheros/Qualcomm wireless communication driver for the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability coul...
The vulnerability of the snd_usb_endpoint_set_params() function in the sound/usb/endpoint.c module of Linux’s sound device support for USB audio devices allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sndusbendpointsetparams function in the sound/usb/endpoint.c module, which is part of Linux’s sound device support for USB devices, is related to incorrect calculation of buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the `sof_get_control_data()` function in the `sound/soc/sof/ipc3-topology.c` file, which is part of the Linux operating system’s SoC audio support mechanism, allows a attacker to gain access to protected information or cause a service failure.
The vulnerability of the sofgetcontroldata function in the sound/soc/sof/ipc3-topology.c sound support module of the Linux SoC kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...