92710 matches found
The vulnerability of the qla2x00_terminate_rport_io() function in the drivers/scsi/qla2xxx/qla_attr.c file of the Linux SCSI device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the qla2x00terminaterportio function in the drivers/scsi/qla2xxx/qlaattr.c file of the Linux SCSI device driver module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...
The vulnerability of the `snd_jack_dev_register()` function in the sound/core/jack.c module allows a hacker to cause a service failure in Linux operating systems with integrated audio cards.
The vulnerability of the sndjackdevregister function in the sound/core/jack.c module, which supports audio cards in Linux operating systems, is related to the assignment of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the `tipc_sk_create()` function in the `net/tipc/socket.c` module of the TIPC protocol implementation in the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the tipcskcreate function in the net/tipc/socket.c module of the TIPC protocol implementation in Linux’s operating system is related to errors during the update of the reference counter. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the raid5_add_disk() function in the drivers/md/raid5.c module of the Linux kernel support for multiple device types (RAID and LVM) allows a hacker to cause a service failure.
The vulnerability of the raid5adddisk function in the drivers/md/raid5.c module of the Linux support module for multiple devices RAID and LVM is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Vulnerability of the ata_host_alloc_pinfo() function in the drivers/ata/libata-core.c module – The SATA/PATA driver of the Linux operating system allows a hacker to trigger a service failure.
Vulnerability of the atahostallocpinfo function in the drivers/ata/libata-core.c module – The Linux kernel’s SATA/PATA driver relies on the assignment of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the DWM Core Library in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the DWM Core Library in Windows operating systems relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the lpfc_fc_frame_check() function in the drivers/scsi/lpfc/lpfc_sli.c file of the Linux operating system’s SCSI device support driver allows a hacker to cause a service failure.
The vulnerability of the lpfcfcframecheck function in the drivers/scsi/lpfc/lpfcsli.c file of the Linux SCSI device support driver is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the `ksmbd_free_transport()` function in the `fs/smb/server/transport_tcp.c` file of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ksmbdfreetransport function in the fs/smb/server/transporttcp.c file of the Linux kernel is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of the handle_tx_event() function in the drivers/usb/host/xhci-ring.c file of the Linux operating system’s USB device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the handletxevent function in the drivers/usb/host/xhci-ring.c file of the Linux USB device driver framework is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary code.
The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the VoIP gateway software Telecom MG, related to the failure to implement measures to neutralize special elements, allows a perpetrator to execute arbitrary codes.
The vulnerability of the VoIP gateway software of Telecom MG is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the jbd2_fc_wait_bufs() function in the fs/jbd2/journal.c file of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the jbd2fcwaitbufs function in the fs/jbd2/journal.c file of the Linux kernel operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...
The vulnerability of the rt700_jack_detect_handler() function in the sound module/soc/codecs/rt700.c file, which is part of the Linux operating system’s SoC audio support, allows a hacker to cause a service failure.
The vulnerability of the rt700jackdetecthandler function in the sound module/soc/codecs/rt700.c file, which is part of the Linux operating system’s audio support for SoC cores, relates to the use of a NULL pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a...
The vulnerability of the `ksmbd_session_rpc_open()` function in the `fs/smb/server/mgmt/user_session.c` module of the SMB server support in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ksmbdsessionrpcopen function in the fs/smb/server/mgmt/usersession.c module, which is part of the SMB server support in Linux operating systems, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise th...
The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary code.
The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the VoIP gateway software Telecom MG, related to the failure to implement measures to neutralize special elements, allows a perpetrator to execute arbitrary codes.
The vulnerability of the VoIP gateway software of Telecom MG is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the function in the /goform/set_password file of D-link DIR-823X router microprogramming software allows a hacker to execute any command they desire.
The vulnerability of the /goform/setpassword function in the D-link DIR-823X router microprogramming system is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the n8n automation platform lies in its improper name restriction for paths to the restricted catalog. This allows a malicious actor to execute arbitrary code.
The vulnerability of the n8n automation platform exists due to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by processing uploaded files and transmitting them to remote servers via SSH...
The vulnerability of the brcmf_c_preinit_dcmds() function in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/common.c file of the Broadcom wireless adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the brcmfcpreinitdcmds function in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/common.c file of the Broadcom wireless driver for the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the SmarterTools SmarterMail mail server lies in the lack of protective measures for the website structure, allowing attackers to carry out cross-site scripting attacks.
The vulnerability of the SmarterTools SmarterMail mail server is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using MAPI requests...
The vulnerability of the ext4_mb_mark_bb() function in the fs/ext4/mballoc.c file of the Ext4 file system in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the ext4mbmarkbb function in the fs/ext4/mballoc.c file of the Ext4 file system in the Linux operating system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the cifs_kill_sb() function in the fs/cifs/cifs.c module of the Linux kernel file system support mechanism allows a hacker to cause a service failure.
The vulnerability of the cifskillsb function in the fs/cifs/cifs.c module of the Linux operating system’s file system support module is related to code errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
Vulnerability of the hdlcdev_init() function in the drivers/tty/synclink_gt.c module – This driver for console TTY in the Linux kernel allows a hacker to cause a service failure.
Vulnerability of the hdlcdevinit function in the drivers/tty/synclinkgt.c module – The console TTY driver for the Linux operating system is vulnerable due to the use of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the spectre_v2_select_mitigation() function in the arch/x86/kernel/cpu/bugs.c module, which is part of the Linux operating system’s kernel support for x86 platforms, allows a hacker to trigger a system failure.
The vulnerability of the spectrev2selectmitigation function in the arch/x86/kernel/cpu/bugs.c module of the Linux operating system’s kernel for x86 platforms is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the mpi3mr_soft_reset_handler() function in the drivers/scsi/mpi3mr/mpi3mr_fw.c file of the Linux SCSI device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the mpi3mrsoftresethandler function in the drivers/scsi/mpi3mr/mpi3mrfw.c file of the Linux SCSI device driver module is related to accessing memory beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...
The vulnerability of the complex video surveillance system “Video Surveillance Platform” arises from the lack of measures taken to protect the SQL query structure, allowing a perpetrator to execute arbitrary code.
The vulnerability of the complex video surveillance system “Video Surveillance Platform” lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the VoIP gateway software Telecom MG, related to the failure to implement measures to neutralize special elements, allows a perpetrator to execute arbitrary codes.
The vulnerability of the VoIP gateway software of Telecom MG is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the doSystem() function in D-Link DCS-931L microprogrammed security cameras allows a intruder to execute any command they desire.
The vulnerability of the doSystem/setSystemAdmin function in D-Link DCS-931L microprogrammed security cameras is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the sub_4211C8() function in D-link DIR-823X router microprogramming software allows a hacker to execute any command they desire.
The vulnerability of the sub4211C8 function /goform/setfiltering of the D-link DIR-823X router’s microprogramming system is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the nfsd_proc_read() function in the fs/nfsd/nfsproc.c module of the Linux kernel’s Network File System support module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the nfsdprocread function in the fs/nfsd/nfsproc.c module, which is part of the Linux kernel’s Network File System support, involves copying buffers without checking their size—a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromi...
The vulnerability of the get_max_inline_xattr_value_size() function in the fs/ext4/inline.c module of the Linux file system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the getmaxinlinexattrvaluesize function in the fs/ext4/inline.c module of the Linux file system’s kernel is related to operations that go beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the FreePBX IP-telephony system’s API module lies in errors related to context switching for privilege escalation, allowing attackers to elevate their privileges.
The vulnerability of the FreePBX IP-telephony system’s API module is related to errors in context switching for privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
The vulnerability of the mpol_rebind_preferred() function in the mm/mempolicy.c module of the Linux kernel’s memory management subsystem allows a hacker to trigger a service failure.
The vulnerability of the mpolrebindpreferred function in the mm/mempolicy.c module of the Linux kernel’s memory management subsystem is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...
The vulnerability of the mc_probe() function in the sound/soc/intel/boards/sof_sdw.c file allows a hacker to cause a system failure in the Linux operating system’s SoC kernel support for audio.
The vulnerability of the mcprobe function in the sound/soc/intel/boards/sofsdw.c file, which is part of the Linux operating system’s audio support for SoC cores, involves exposing confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the `ksmbd_alloc_work_struct()` function in the `fs/smb/server/ksmbd_work.c` module of the SMB server implementation in Linux’s operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ksmbdallocworkstruct function in the fs/smb/server/ksmbdwork.c module of the SMB server implementation in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the sub_4648F0() function in D-Link DWR-M960 router microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the sub4648F0 function in D-Link DWR-M960 router microprogramming software is related to the execution of operations outside the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by...
The vulnerability of the n8n automation platform, which stems from the lack of measures taken to protect the website structure, allows a hacker to intercept the session and gain access to the user account.
The vulnerability of the n8n automation platform exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to intercept sessions and gain control of the user account remotely...
The vulnerability of the LibreOffice office software package lies in its ability to bypass authentication by using an alternative path or channel, allowing a perpetrator to increase their privileges.
The vulnerability of the LibreOffice office software package relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability can allow a perpetrator to enhance their privileges...
The vulnerability of the load_firmware_cb() function in the XCeive xc2028/xc3028 kernel driver for Linux operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the loadfirmwarecb function in the drivers/media/tuners/xc2028.c file of the XCeive xc2028/xc3028 tuner driver for the Linux operating system is related to the recursive reuse of previously freed memory due to concurrent access to resources. Exploiting this vulnerability coul...
The vulnerability of the UPnP protocol implementation in Zyxel network devices allows a hacker to execute arbitrary code.
The vulnerability of the UPnP protocol implementation in Zyxel network devices’ microprogramming software is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted SOAP requests...
The vulnerability of the setSchedWifi() function in the microprogramming software for Tenda A21 allows a hacker to execute arbitrary code.
The vulnerability of the setSchedWifi function in the Tenda A21 router’s microprogramming software lies in the fact that the operation’s output goes beyond the buffer in memory when processing the parameters schedStartTime and schedEndTime. Exploiting this vulnerability allows a remote attacker t...
The vulnerability of the VoIP gateway software Telecom MG, related to the failure to implement measures to neutralize special elements, allows a perpetrator to execute arbitrary codes.
The vulnerability of the VoIP gateway software of Telecom MG is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the VoIP gateway software Telecom MG, related to the failure to implement measures to neutralize special elements, allows a perpetrator to execute arbitrary codes.
The vulnerability of the VoIP gateway software of Telecom MG is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Spotlight component in the macOS Sequoia, macOS Sonoma, and macOS Tahoe operating systems allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Spotlight component in the macOS Sequoia, macOS Sonoma, and macOS Tahoe operating systems is related to errors in information processing. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the n8n automation platform, which stems from the lack of measures taken to protect the website structure, allows attackers to execute arbitrary code.
The vulnerability of the n8n automation platform exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, by bypassing the built-in CSP sandbox mechanism...
The vulnerability of the nfsd4_close_open_stateid() function in the fs/nfsd/nfs4state.c module, which is part of the Linux kernel’s Network File System support, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the nfsd4closeopenstateid function in the fs/nfsd/nfs4state.c module, which is part of the Linux kernel’s Network File System support, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the dvb-core driver in the Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the dvb-core driver in the Linux operating system is related to the reutilization of previously freed memory due to errors during link counter updates. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of the inode_init_always() function in the fs/inode.c file of the Linux kernel’s file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the inodeinitalways function in the fs/inode.c file of the Linux kernel’s file system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...
The vulnerability of the `brcmfmac/core.c` function in the Broadcom wireless adapter driver framework of the `drivers/net/wireless/broadcom/brcm80211` module in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the brcmfmac/core.c function in the Broadcom wireless adapter driver’s drivers/net/wireless/broadcom/brcm80211/brcmfmac module in the Linux operating system kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacke...
The vulnerability of the load_balance() function in the kernel/sched/fair.c module of the Linux operating system’s resource management support module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the loadbalance function in the kernel/sched/fair.c module of the Linux operating system’s resource management support module is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...