74701 matches found
The vulnerability of the rds_recvmsg() function in the net/rds/recv.c module, which is part of the Linux kernel’s networking functions, allows a hacker to compromise the confidentiality and accessibility of the protected information.
The vulnerability of the rdsrecvmsg function in the net/rds/recv.c module, which is part of the Linux kernel’s networking functions, relates to improper memory release before deleting the last reference a “memory leak”. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the cipso_v4_doi_free() function in the net/ipv4/cipso_ipv4.c module of the Linux operating system’s IPv4 kernel implementation allows a attacker to compromise the confidentiality and accessibility of protected information.
The vulnerability of the cipsov4doifree function in the net/ipv4/cipsoipv4.c module of the Linux operating system’s IPv4 kernel implementation is related to improper memory release before deleting the last pointer memory leak. Exploiting this vulnerability could allow an attacker to compromise th...
Vulnerability of the dwc3_wIndex_to_dep() function in the drivers/usb/dwc3/ep0.c module – The USB device driver support module in the Linux kernel allows a hacker to trigger a service failure.
Vulnerability of the dwc3wIndextodep function in the drivers/usb/dwc3/ep0.c module – The Linux kernel’s USB device support driver relies on the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the nfs3_proc_create() function in the fs/nfs/nfs3proc.c module of the Linux file system support module allows a attacker to compromise the confidentiality and accessibility of protected information.
The vulnerability of the nfs3proccreate function in the fs/nfs/nfs3proc.c module of the Linux file system support module is related to improper memory release before deleting the last reference memory leak. Exploiting this vulnerability could allow an attacker to compromise the confidentiality an...
Vulnerability of the enetc_clear_bdrs() function in the drivers/net/ethernet/freescale/enetc/enetc.c module – This driver for supporting Ethernet adapter devices in the Freescale Linux operating system allows a malicious actor to compromise the confidentiality and accessibility of protected information.
Vulnerability of the enetcclearbdrs function in the drivers/net/ethernet/freescale/enetc/enetc.c module – The driver for supporting Ethernet adapter devices in the Freescale Linux operating system has a vulnerability that leads to uncontrolled resource consumption. Exploiting this vulnerability...
The vulnerability of the FileStore::LocalStore component in the Discourse mailing list management software allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the FileStore::LocalStore component in the Discourse mailing list management software is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the insufficient protection of website structures, allowing attackers to execute arbitrary code.
The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the nfs3svc_encode_getaclres() function in the fs/nfsd/nfs3acl.c module, which is part of the Linux kernel’s Network File System support, allows a hacker to cause a service failure.
The vulnerability of the nfs3svcencodegetaclres function in the fs/nfsd/nfs3acl.c module, which is part of the Linux kernel’s Network File System support, relates to the use of a NULL pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the setSmartPowerManagement() function in Tenda AC6 router software allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the setSmartPowerManagement function in Tenda AC6 router microprogramming software is related to the execution of operations outside the buffer in memory when processing the time parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause...
The vulnerability of the caif_device_notify() function in the net/caif/caif_dev.c module, which is part of the Linux kernel’s networking functions, allows a hacker to gain access to protected information.
The vulnerability of the caifdevicenotify function in the net/caif/caifdev.c module, which is part of the Linux kernel’s networking functions, stems from improper memory release before deleting the last reference to memory memory leak. Exploiting this vulnerability could allow an attacker to gain...
The vulnerability of the miEnumattr() function in the fs/ntfs3/record.c file of the Linux kernel’s file system ntfs3 allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the miEnumattr function in the fs/ntfs3/record.c file of the Linux kernel’s file system ntfs3 is related to an increase in privileges. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the amdgpu_device_fini_sw() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_device.c kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the amdgpudevicefinisw function in the drivers/gpu/drm/amd/amdgpu/amdgpudevice.c kernel of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...
The vulnerability of the OpenConfig.Set command in the Arist EOS operating system allows a hacker to gain unauthorized access to protected information.
The vulnerability of the OpenConfig.Set command in the Arist EOS operating system is related to access control errors. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the Now Platform IT-infrastructure management system lies in its use of an incomplete blacklist when processing input data. This allows a perpetrator to execute arbitrary code.
The vulnerability of the Now Platform IT infrastructure management system is related to the use of an incomplete blacklist when processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the prepare_trampoline() function in the arch/arm64/net/bpf_jit_comp.c module of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the preparetrampoline function in the arch/arm64/net/bpfjitcomp.c module of the Linux operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of the IBM Security Verify Directory integration tool’s container allows a perpetrator to elevate their privileges and execute arbitrary commands.
The vulnerability of the IBM Security Verify Directory integration tool’s container is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges and execute arbitrary commands...
The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the insufficient protection of website structures, allowing attackers to execute arbitrary code.
The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the Golang programming language lies in the improper limitation of path names to restricted access directories, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the Golang programming language is related to input validation errors when processing directory traversals in file names. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the insufficient protection of website structures, allowing attackers to execute arbitrary code.
The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the link_to_fixup_dir() function in the fs/btrfs/tree-log.c module of the Linux operating system’s file system support module allows a attacker to cause a service failure.
The vulnerability of the linktofixupdir function in the fs/btrfs/tree-log.c module of the Linux operating system’s file system support module is related to improper cleaning during exception handling. Exploiting this vulnerability can allow an attacker to cause service failures...
Vulnerability of the smsc75xx_bind() function in the drivers/net/usb/smsc75xx.c module – The driver for supporting USB network adapters in Linux kernels allows a hacker to gain access to protected information.
Vulnerability of the smsc75xxbind function in the drivers/net/usb/smsc75xx.c module – The Linux USB network adapter driver has vulnerabilities related to security configuration errors. Exploiting this vulnerability can allow attackers to gain access to protected information...
The vulnerability of the fsl_ifc_ctrl_remove() function in the drivers/memory/fsl_ifc.c module of the Linux kernel allows a attacker to compromise the confidentiality and accessibility of protected information.
The vulnerability of the fslifcctrlremove function in the drivers/memory/fslifc.c module of the Linux kernel is related to improper memory release before deleting the last reference „memory leak“. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and...
The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server lies in the uncontrolled resource consumption, which allows attackers to influence the integrity of protected information.
The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a malicious actor to influence the integrity of protected information...
The vulnerability of Dell Avamar’s backup and recovery software lies in its handling of resources after their expiration or release. This allows attackers to influence the confidentiality and integrity of the protected information.
The vulnerability of Dell Avamar’s backup and recovery software relates to operations involving resources after their expiration or release. Exploiting this vulnerability could allow attackers to compromise the confidentiality and integrity of the protected information...
The vulnerability of the IBM Verify Identity Access Digital Credentials access control system lies in the absence of a reference to an active, allocated resource. This allows attackers to trigger a service failure.
The vulnerability of the IBM Verify Identity Access Digital Credentials access control system lies in the absence of a reference to an active, allocated resource. Exploiting this vulnerability could allow a malicious actor, operating remotely, to trigger a service failure using a specially create...
The vulnerability of the websGetVar function in the /goform/set_cmd file of the LB-LINK microprogramming router software allows a hacker to gain full control over the device.
The vulnerability of the websGetVar function in the /goform/set command of the LB-LINK microprogramming device exists because measures to neutralize the special elements used in the operating system command are not taken. Exploiting this vulnerability can allow a malicious actor to gain full...
The vulnerability of the mgb4_cmt_set_vin_freq_range() function in the drivers/media/pci/mgb4/mgb4_cmt.c module of the Linux kernel allows a hacker to compromise the confidentiality and accessibility of the protected information.
The vulnerability of the mgb4cmtsetvinfreqrange function in the drivers/media/pci/mgb4/mgb4cmt.c module of the Linux kernel is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of protected information...
The vulnerability of the formRoute() function in the TOTOLINK A3002R router’s software allows a hacker to execute arbitrary code.
The vulnerability of the formRoute function in the TOTOLINK A3002R router’s microprogramming system lies in the reading of data beyond the buffer boundaries in memory during the processing of the subnet parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by...
Vulnerability of the mt7615_txp_skb_unmap_fw() function in the drivers/net/wireless/mediatek/mt76/mt7615/mac.c module – A driver for supporting wireless communication adapters in the Linux operating system, which allows an attacker to gain access to protected information
Vulnerability of the mt7615txpskbunmapfw function in the drivers/net/wireless/mediatek/mt76/mt7615/mac.c module – The Linux kernel wireless adapter support driver is vulnerable to a memory leak before the last reference is freed. Exploiting this vulnerability could allow an attacker to access...
Vulnerability of the ice_set_ring_xdp() function in the drivers/net/ethernet/intel/ice/ice.h module – A driver for supporting Ethernet adapter cards in Linux kernels, which allows a hacker to cause a service failure.
Vulnerability of the icesetringxdp function in the drivers/net/ethernet/intel/ice/ice.h module – The driver for supporting Ethernet network adapters in Linux’s kernel is vulnerable due to a reliance on the NULL pointer pointer. Exploiting this vulnerability could allow an attacker to cause a syst...
The vulnerability of the Adobe Experience Manager (AEM) content and media data management system, related to inadequate access control mechanisms, allows attackers to escalate their privileges.
The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to lack of access control mechanisms. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...
The vulnerability of the wdt_startup() function in the drivers/watchdog/sbc60xxwdt.c module exposes the support for Linux kernel watchdog timers, allowing an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the wdtstartup function in the drivers/watchdog/sbc60xxwdt.c module related to Linux kernel watchdog timer support stems from the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity...
Vulnerability of the iscsi_prep_bidi_ahs() function in the drivers/scsi/libiscsi.c module – This driver supports SCSI devices in Linux operating systems. It can be exploited by attackers to cause service interruptions.
Vulnerability of the iscsiprepbidiahs function in the drivers/scsi/libiscsi.c module – The Linux system’s SCSI device driver framework involves the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the i801_check_post() function in the drivers/i2c/buses/i2c-i801.c module of the Linux kernel allows a attacker to access protected information or cause service failures.
The vulnerability of the i801checkpost function in the drivers/i2c/buses/i2c-i801.c module of the Linux kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...
Vulnerability of the mcba_usb_start() function in the drivers/net/can/usb/mcba_usb.c module – The Linux kernel’s CAN network device support driver allows a hacker to cause a service failure.
Vulnerability of the mcbausbstart function in the drivers/net/can/usb/mcbausb.c module – The Linux kernel’s CAN network device driver has vulnerabilities related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause service failures...
Vulnerability of the mkiss_close() function in the drivers/net/hamradio/mkiss.c module – A Linux kernel network adapter driver that allows attackers to compromise the confidentiality and accessibility of protected information.
Vulnerability of the mkissclose function in the drivers/net/hamradio/mkiss.c module – The Linux kernel-based network adapter driver has a vulnerability related to improper memory release before deleting the last reference „memory leak“. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the cifs_compose_mount_options() function in the fs/cifs/cifs_dfs_ref.c module of the Linux kernel file system allows a hacker to cause a service failure.
The vulnerability of the cifscomposemountoptions function in the fs/cifs/cifsdfsref.c module of the Linux file system support module is related to the use of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the alcorpci_init_check_aspm() function in the drivers/misc/cardreader/alcorpci.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the alcorpciinitcheckaspm function in the drivers/misc/cardreader/alcorpci.c module of the Linux kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the formAdvancedSetListSet function in the microprogramming software for wireless Wi-Fi routers Tenda W30E allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the formAdvancedSetListSet function in the microprogrammed wireless Wi-Fi router software Tenda W30E is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...
Vulnerability of the arm_smmu_iova_to_phys_hard() function in the driver/iommu/arm-smmu.c file – This is a Linux kernel IOMMU support driver that allows attackers to compromise the confidentiality and accessibility of protected information.
Vulnerability of the armsmmuiovatophyshard function in the driver/iommu/arm-smmu.c file – The Linux kernel’s IOMMU support driver is vulnerable to security-related errors. Exploiting this vulnerability could allow attackers to compromise the confidentiality and accessibility of protected...
The vulnerability of the sub_3C8EC function in the microprogramming software of the dual-band Wi-Fi amplifier Netgear EX6200 allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sub3C8EC function in the microprogramming software of the dual-band Wi-Fi amplifier Netgear EX6200 is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to influence the confidentiality,...
Vulnerability of the ath11k_wmi_pdev_dfs_radar_detected_event() function in the drivers/net/wireless/ath/ath11k/wmi.c module – This driver provides support for Atheros/Qualcomm wireless adapter devices in the Linux operating system. It allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ath11kwmipdevdfsradetectedevent function in the drivers/net/wireless/ath/ath11k/wmi.c module – the driver for Atheros/Qualcomm wireless adapter support in Linux operating systems – stems from the reutilization of previously freed memory. Exploiting this vulnerability can...
The vulnerability of the ngene_command_config_free_buf() function in the driver drivers/media/pci/ngene/ngene-core.c file of Micronas PCI Express card adapters in Linux operating systems allows a hacker to cause a service failure.
The vulnerability of the ngenecommandconfigfreebuf function in the drivers/media/pci/ngene/ngene-core.c file of Micronas PCI Express card adapters related to Linux operating systems involves reading beyond the buffer’s boundaries. Exploiting this vulnerability can allow an attacker to cause a...
The vulnerability of the ext4_mb_init_backend() function in the fs/ext4/mballoc.c module of the Ext4 file system support module for Linux’s kernel allows a attacker to cause a service failure.
The vulnerability of the ext4mbinitbackend function in the fs/ext4/mballoc.c module of the Ext4 file system support module in the Linux operating system is related to improper memory release before deleting the last reference „memory leak“. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the `ip6_route_info_create()` function in the `net/ipv6/route.c` module of the IPv6 protocol implementation in the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the ip6routeinfocreate function in the net/ipv6/route.c module of the IPv6 protocol implementation in the Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the ip_mcDestroyDev() function in the net/ipv4/igmp.c module of the Linux operating system’s IPv4 protocol implementation allows a attacker to cause a service failure.
The vulnerability of the ipmcDestroyDev function in the net/ipv4/igmp.c module of the Linux operating system’s IPv4 protocol implementation leads to uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the fwAcosCgiInbound function in NETGEAR EX6120 router microprogramming software allows a hacker to influence the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the fwAcosCgiInbound function in NETGEAR EX6120 router microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to influence the confidentiality, integrity, and accessibility of...
The vulnerability of the rt4801_enable() function in the drivers/regulator/rt4801-regulator.c file of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the rt4801enable function in the drivers/regulator/rt4801-regulator.c file of the Linux kernel is related to the dereferencing of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the Helper service in the Cato Client software for remote access allows a hacker to elevate their privileges and execute arbitrary code.
The vulnerability of the Cato Client software’s remote access service is related to improper resource blocking. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...
The vulnerability of the server of the surveillance and recording system for AXIS Camera Station Pro allows a intruder to create or modify arbitrary files.
The vulnerability of the surveillance and recording system server for AXIS Camera Station Pro relates to improper external management of file names or files. Exploiting this vulnerability can allow attackers to create or modify arbitrary files...