kvm_arch_vcpu_create Heap Buffer Overflow DoS

The vulnerability of the kvmarchvcpucreate function in the arch/arm64/kvm/arm.c module of the virtualization subsystem on the ARM 64-bit kernel-based Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allo...

bmp580trigger_handler Heap Buffer Overflow Info Disclosure

The vulnerability of the bmp580triggerhandler function in the drivers/iio/pressure/bmp280-core.c file of various types of embedded sensors in the Linux operating system is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker, acting remotely,...

Direct Rendering Infrastructure GPU Adreno a6xx_gpu_init Heap Buffer Overflow

The vulnerability of the a6xxgpuinit function in the drivers/gpu/drm/msm/adreno/a6xxgpu.c file of the Direct Rendering Infrastructure DRI driver module in the Linux operating system is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to...

Windows Update Stack Privilege Escalation

The vulnerability of the Windows Update Stack component in Windows operating systems is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow an attacker to increase their privileges...

I2C Driver Heap Buffer Overflow DoS

The vulnerability of the i801access function in the drivers/i2c/busses/i2c-i801.c module of the I2C driver for the Linux operating system is related to premature release of resources during its operation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux TLS Protocol Buffer Overflow

The vulnerability of the tlspushrecord function in the net/tls/tlssw.c module of the Linux operating system’s TLS implementation is related to a single-shift error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...

Linux IIO ADC mt6358_read_imp() Unprotected Information Disclosure

The vulnerability of the mt6358readimp function in the drivers/iio/adc/mt6359-auxadc.c file of various types of built-in sensors in the Linux operating system is related to the use of an uninitialized variable. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...

Linux SPI Device Driver Heap Buffer Overflow DoS

The vulnerability of the sprdspiprobe function in the drivers/spi/spi-sprd.c file of the Linux kernel’s SPI device driver relates to pointer aliasing. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux kernel net/batman-adv/tp_meter Heap Buffer Overflow DoS

The vulnerability of the batadvtpsendercleanup function in the net/batman-adv/tpmeter.c module, which is part of the Linux kernel’s networking functions, is related to situations where there is a race condition in the signal handler. Exploiting this vulnerability could allow an attacker to...

Linux IPv6 Protocol Heap Buffer Overflow DoS

The vulnerability of the vti6siocdevprivate function in the net/ipv6/ip6vti.c module of the Linux operating system’s IPv6 kernel implementation is related to insufficient spatial partitioning. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

amdgpu_gart_table_ram_free Heap Buffer Overflow DoS

The vulnerability of the amdgpugarttableramfree function in the drivers/gpu/drm/amd/amdgpu/amdgpugart.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a...

ARM virtualization subsystem Kernel Buffer Overflow DoS

The vulnerability of the vgicitsrestoredte function in the arch/arm64/kvm/vgic/vgic-its.c module of the ARM 64-bit kernel-based Linux operating system involves the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to access...

Linux USB TypeC Driver Heap Buffer Overflow DoS

The vulnerability of the svdmconsumemodes function in the drivers/usb/typec/tcpm/tcpm.c file of the driver for USB TypeC controllers in the Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker t...

Linux Kernel BPF __cgroup_bpf_run_filter_sysctl Buffer Overflow DoS

The vulnerability of the cgroupbpfrunfiltersysctl function in the kernel/bpf/cgroup.c module, which supports the BPF interpreter for Linux kernels, is related to the release of an incorrect pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

Linux Kernel bio_integrity_copy_user() Buffer Overflow

The vulnerability of the biointegritycopyuser function in the block/bio-integrity.c module, which supports the block-level kernel in the Linux operating system, is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to...

SolarWinds Serv-U Authentication Bypass Code Execution

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled password. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code as the root user...

BPF_CALL_4() Kernel Buffer Overflow DoS

The vulnerability of the BPFCALL4 function in the net/core/filter.c module related to the execution of kernel network functions in Linux operating systems involves a pointer shift beyond the allocated memory range. Exploiting this vulnerability could allow an attacker to compromise the...

Linux kernel BPF verifier Heap Buffer Overflow DoS

The vulnerability of the visitinsn function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter for Linux kernel, relates to the lack of checks for the return value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

SolarWinds Serv-U Authentication Bypass

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to create administrator accounts remotely...

SolarWinds Serv-U Authentication Bypass Privilege Escalation

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled key. Exploiting this vulnerability allows an intruder to enhance their privileges and gain unauthorized access to protected...

Linux USB Device Driver Heap Buffer Overflow DoS

The vulnerability of the opmap2430probe function in the drivers/usb/musb/omap2430.c driver for Linux USB device drivers is related to the dereferencing of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux IPv6 Kernel Heap Buffer Overflow DoS

The vulnerability of the ip6parsetlv function in the net/ipv6/exthdrs.c module of the Linux operating system’s IPv6 kernel implementation is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

RoundCube Webmail Authentication Bypass

The vulnerability of the RoundCube Webmail email client relates to the ability to bypass authentication through spamming. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

Linux USB Device Driver Heap Buffer Overflow DoS

The vulnerability of the belkinsareadintcallback function in the drivers/usb/serial/belkinsa.c file of the Linux device driver framework is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Block Buffer Overflow DoS

The vulnerability of the bdevcacheinit function in the block/bdev.c module, which supports the block-level kernel in Linux operating systems, is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux net/sched/sch_sfb Heap Buffer Overflow DoS

The vulnerability of the sfbdequeue function in the net/sched/schsfb.c module of the Linux operating system’s network/scheduling subsystem is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

mac80211 Stack Heap Buffer Overflow

The vulnerability of the ieee80211parsetxradiotap function in the net/mac80211/tx.c module of the mac80211 stack implementation in the Linux operating system is related to an incorrect bitwise shift of a integer value. Exploiting this vulnerability could allow an attacker to compromise the...

Direct Rendering Infrastructure Heap Buffer Overflow DoS

The vulnerability of the drmgpusvmscanmm function in the drivers/gpu/drm/drmgpusvm.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system relates to the unlocking of unlocked resources. Exploiting this vulnerability could allow an attacker to compromise the...

Parse Server Privilege Escalation

The vulnerability of the GitHub CI workflow server for syntax analysis in Parse Server is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information and enhance their privileges...

Linux net/sched/act_api.c DoS

The vulnerability of the net/sched/actapi.c component in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux net/can/bcm.c DoS

The vulnerability of the net/can/bcm.c component in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

JWT Refresh Token Handler File Privilege Escalation

The vulnerability of the /api/connections file of the JWT Refresh Token Handler component of the software platform for automated file exchange in Cleo Harmony is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges and gain...

freerdp-proxy RDP Unauthorized Access

The vulnerability of the freerdp-proxy RDP client component, FreeRDP, is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Online Store Application Code Execution

The vulnerability of the application software interface of programming platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to the lack of measures taken to neutralize special elements in the template creation mechanism...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the lib/rhashtable.c component of the Linux operating system is related to the dereferencing of a pointer whose validity period has expired. Exploiting this vulnerability can allow an attacker to cause a service failure...

ogs_sbi_timeParse() DoS

The vulnerability of the ogssbitimeParse function, a component of the NR/LTE Open5GS network creation and management tool, lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

phpMyFAQ updateData() Unauthorized Access

The vulnerability of the updateData function in the phpMyFAQ web application is related to the lack of necessary checks during password changes. Exploiting this vulnerability could allow an attacker who operates remotely to gain unauthorized access to protected information...

phpMyFAQ removeTwofactorConfig Bypass

The vulnerability of the removeTwofactorConfig function in the phpMyFAQ web application is related to the lack of authentication for the critical function. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures remotely...

unix_gc() Component MSG_PEEK DoS

Vulnerability of the unixgc component. Igor, MSGPEEK. The kernels of the Linux operating system are related to the swapping of pointers with expired lifetimes. Exploitation of this vulnerability can allow an attacker to cause a service failure...

Udisks Privilege Insecure DoS

The vulnerability of the program for querying and managing Udisks storage devices is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to cause a service failure...

D-Link DNS-320 File Sharing Arbitrary Command Execution

The vulnerability of the /cgi/filesharing.cgi file of the File Sharing component of the D-Link DNS-320 networking storage software is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary...

RouterOS Built-in Tool Disclosure DoS

The vulnerability of the built-in tool for measuring channel bandwidth on the RouterOS operating system of MikroTik routers is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failur...

D-Link DNS-340L CGI Handler Code Execution

The vulnerability of the /cgi-bin/dropbox.cgi script of the CGI Handler component in the D-Link DNS-340L network storage software is related to the lack of measures taken at the administrative level to ensure data cleanup. Exploiting this vulnerability could allow an attacker operating remotely t...

macOS iOS iPadOS Buffer Overflow DoS

The vulnerability of operating systems macOS, iOS, and iPadOS stems from the execution of operations beyond the boundaries of memory buffers. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

WebHandler DoS

The vulnerability of the WebHandler component in Apple’s operating systems—iOS, Safari, iPadOS, macOS, tvOS, visionOS, and watchOS—is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Fortinet FortiClient DNS Modification Code Execution

The vulnerability of the Fortinet FortiClient Windows security tool lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to remotely alter or forge DNS responses for the target host and execute arbitrary code using specially...

IBM Aspera Console DoS

The vulnerability in the IBM Aspera Console, a web application for managing high-speed data transfer environments, is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability may allow an attacker, operating remotely, to cause service...

IBM Aspera Console Unauthorized Access

The vulnerability of the IBM Aspera Console, a web application for managing high-speed data transfer environments, is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected...

Moxa Router Access Control

The vulnerabilities of Moxa TN-4900, Moxa EDR-8010, Moxa EDR-G9010, Moxa OnCell G4302-LTE4, and Moxa OnCell G4308-LTE4 microprogrammed router software are related to deficiencies in access control. Exploiting these vulnerabilities can allow an attacker to gain access to confidential information...

Prisma Access Agent File Deletion DoS

The vulnerability of the Prisma Access Agent, a user-level remote access agent for corporate resources and applications, stems from an incorrect definition of the link before accessing a file. Exploiting this vulnerability could allow a malicious actor to delete system files and cause service...