SolarWinds Serv-U Privilege Escalation

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to lack of access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to elevate their privileges to that of a system administrator...

SolarWinds Serv-U Privilege Escalation

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor, operating remotely, to elevate their privileges to that of a system administrator...

SolarWinds Serv-U Code Execution Root

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on behalf of the root user remotely...

Linux kernel firmware driver module Use-After-Free

The vulnerability of the handlefwknotifcallbacks function in the drivers/firmware/armffa/driver.c file of the Linux kernel’s firmware driver relates to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux USB Device Driver Heap Buffer Overflow DoS

The vulnerability of the opmap2430probe function in the drivers/usb/musb/omap2430.c driver for Linux USB device drivers is related to the dereferencing of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux TTY Driver Heap Buffer Overflow DoS

The vulnerability of the dw8250probe function in the drivers/tty/serial/8250/8250dw.c file of the console TTY driver in the Linux kernel’s serial port module is related to the assignment of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to compromise the...

ISO9660 driver libfsimage Privilege Escalation

The vulnerability of the ISO9660 driver of the libfsimage library in Xen relates to reading data outside of the allowed range in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

adreno_get_param Heap Buffer Overflow DoS

The vulnerability of the adrenogetparam function in the drivers/gpu/drm/msm/adreno/adrenogpu.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability can allow a remote attacker to cause a service...

amdgpu_hmm_range_get_pages() Heap Buffer Overflow DoS

The vulnerability of the amdgpuhmmrangegetpages function in the drivers/gpu/drm/amd/amdgpu/amdgpuhmm.c driver for the Direct Rendering Infrastructure DRI of AMD GPUs in the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an...

Linux USB driver Heap Buffer Overflow DoS

The vulnerability of the dwc2hcdurbdequeue function in the driver module/dwc2/hcd.c of the Linux operating system’s USB device driver framework is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

Linux Kernel DPU Writeback Buffer Overflow DoS

The vulnerability of the dpuwritebackinit function in the drivers/gpu/drm/msm/disp/dpu1/dpuwriteback.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the assignment of a pointer with an expired lifetime. Exploiting this vulnerability could allow...

PyPDF _get_outline() Heap Buffer Overflow DoS

The vulnerability of the getoutline function in the pypdf/doccommon.py library of the Python PDF handling library PyPDF is related to asymmetric resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux IPv6 net/ipv6/route.c Heap Buffer Overflow DoS

The vulnerability of the rt6fillnode function in the net/ipv6/route.c module of the IPv6 protocol implementation in the Linux operating system is related to the execution of a loop with an unreachable exit condition an “infinite loop”. Exploitation of this vulnerability could allow a remote...

fbcon.do_set_font Heap Buffer Overflow DoS

The vulnerability of the fbcondosetfont function in the drivers/video/fbdev/core/fbcon.c driver for kernel-based graphics buffer devices in the Linux operating system is related to the execution of operations outside the buffer’s boundaries. Exploiting this vulnerability could allow an attacker t...

Linux L2TP Buffer Overflow

The vulnerability of the l2tpsessionunhash function in the net/l2tp/l2tpcore.c module of the Linux operating system’s L2TP tunneling protocol implementation is related to the execution of a loop with an unreachable exit condition “Infinite loop”. Exploiting this vulnerability could allow an...

Linux kernel sev_dbg_crypt Heap Buffer Overflow DoS

The vulnerability of the sevdbgcrypt function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...

Linux USB device driver Composite Setup

The vulnerability of the compositesetup function in the drivers/usb/gadget/composite.c module of the Linux USB device driver relates to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

UCSI Interface Driver Heap Buffer Overflow DoS

The vulnerability of the ucsihandleconnectorchange function in the drivers/usb/typec/ucsi/ucsi.c file of the UCSI interface driver for the Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to...

Linux Wireless Scan Function CVE

The vulnerability of the cfg80211mergeprofile function in the net/wireless/scan.c module related to Linux’s wireless communication support is associated with the execution of a loop with an unreachable exit condition an “infinite loop”. Exploiting this vulnerability could allow an attacker to...

platforms for developing and Privilege Escalation

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of protective measures for website structures. Exploiting these vulnerabilities can allow attackers to enhance their...

Online Store Authentication Bypass Privilege Escalation

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

Online Store Path Traversal

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to incorrect path name restrictions in the catalog. Exploiting this vulnerability can allow an attacker to bypass security restrictions...

Online Store Authentication Bypass

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to bypass security restriction...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the iiobufferenqueuedmabuf function in the drivers/iio/industrialio-buffer.c module, which is used by various types of embedded sensor drivers in Linux operating systems, involves a flaw where resources are not released after their useful period has ended. Exploiting this...

Linux input device driver Heap Buffer Overflow DoS

The vulnerability of the xpadoneprocesspacket function in the drivers/input/joystick/xpad.c module of the Linux input device driver relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the biointegritymapuser function in the block/bio-integrity.c module, which supports the block-level kernel in the Linux operating system, is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

bmp580trigger_handler Heap Buffer Overflow Info Disclosure

The vulnerability of the bmp580triggerhandler function in the drivers/iio/pressure/bmp280-core.c file of various types of embedded sensors in the Linux operating system is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker, acting remotely,...

Linux Kernel Kexec Handover Buffer Overflow DoS

The vulnerability of the khofillkimage function in the kernel/liveupdate/kexechandover.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the ethnltsinfodumponenetdev function in the net/ethtool/tsinfo.c module, which is part of the Linux kernel’s networking functions, relates to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

MariaDB GRANT PROXY Privilege Bypass

The vulnerability of the hasauth function in the GRANT PROXY component of the MariaDB database management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to bypass existing security measures and gain increased privileges...

Linux net/sched/sch_dualpi2 Heap Buffer Overflow DoS

The vulnerability of the dualpi2qdiscenqueue function in the net/sched/schdualpi2.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow Unauthorized Access

The vulnerability of the adis16550triggerhandler function in the drivers/iio/imu/adis16550.c module of the Linux kernel is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to gain unauthorized access to protected information...

Linux drivers auxdisplay line-display buffer overflow DoS

The vulnerability of the linedispdisplay function in the drivers/auxdisplay/line-display.c module of the Linux kernel is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the pdsfcfwrpc function in the drivers/fwctl/pds/main.c file of the Linux kernel is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux IPv6 Protocol Heap Buffer Overflow DoS

The vulnerability of the vti6siocdevprivate function in the net/ipv6/ip6vti.c module of the Linux operating system’s IPv6 kernel implementation is related to insufficient spatial partitioning. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux Kernel mac80211 Stack Heap Buffer Overflow DoS

The vulnerability of the function ieee80211invokefastrx in the net/mac80211/rx.c module of the mac80211 stack in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

amdgpu_gart_table_ram_free Heap Buffer Overflow DoS

The vulnerability of the amdgpugarttableramfree function in the drivers/gpu/drm/amd/amdgpu/amdgpugart.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a...

VFIO Heap Buffer Overflow DoS

The vulnerability of the vfiopcicorefeaturedmabuf function in the driver/vfio/pci/vfiopcidmabuf.c file of the VFIO device drivers in the Linux operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

drivers/usb/typec/tcpm/tcpci_maxim_core.c Heap Buffer Overflow DoS

The vulnerability of the processrx function in the drivers/usb/typec/tcpm/tcpcimaximcore.c file of the Linux kernel driver for USB TypeC ports is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux USB TypeC Driver Heap Buffer Overflow DoS

The vulnerability of the svdmconsumemodes function in the drivers/usb/typec/tcpm/tcpm.c file of the driver for USB TypeC controllers in the Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker t...

Linux Kernel Buffer Overflow

The vulnerability of the function batadvttpreparetvlvglobaldata in the module net/batman-adv/translation-table.c, which is part of the networking functions of the Linux kernel, is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the...

Linux kernel 6lowpan buffer overflow

The vulnerability of the lowpanxmit function in the net/ieee802154/6lowpan/tx.c module of the Linux kernel lies in the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux keyctl_pkey_params_get_2 Buffer Overflow DoS

The vulnerability of the keyctlpkeyparamsget2 function in the security/keys/keyctlpkey.c module, a component of the Linux kernel’s key management framework, is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise...

ads1298_get_scale() Function Buffer Overflow

The vulnerability of the ads1298getscale function in the drivers/iio/adc/ti-ads1298.c driver for various types of embedded sensors in Linux operating systems is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to...

Linux Kernel bio_integrity_copy_user() Buffer Overflow

The vulnerability of the biointegritycopyuser function in the block/bio-integrity.c module, which supports the block-level kernel in the Linux operating system, is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to...

SolarWinds Serv-U Privilege Escalation

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to lack of access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to elevate their privileges to that of a system administrator...

SolarWinds Serv-U Authentication Bypass Code Execution

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled password. Exploiting this vulnerability allows a malicious actor to elevate their privileges and execute arbitrary code as the root...

SolarWinds Serv-U Auth Bypass RCE

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on behalf of the root user remotely...

SolarWinds Serv-U Authentication Bypass

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the ability to bypass authentication using a user-controlled key. Exploiting this vulnerability allows an attacker to remotely intercept sessions and gain control of the user account...

SolarWinds Serv-U Session Interception Access

The vulnerability of the software for secure file sharing and transmission related to SolarWinds Serv-U lies in the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to intercept sessions and gain access to the user account...