Linux kernel make_task_dead() function Heap Buffer Overflow DoS

The vulnerability of the maketaskdead function in the kernel/exit.c module of the Linux operating system’s kernel relates to the simultaneous release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

IBM Sterling B2B Integrator SQL Injection

The vulnerability of the IBM Sterling B2B Integrator and the IBM Sterling File Gateway file gateway software lies in the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Gravity Forms Plugin Arbitrary File Upload Code Execution

The vulnerability of the copypostimage function in the Gravity Forms plugin of the WordPress content management system is related to the ability to upload unlimited dangerous files. Exploiting this vulnerability allows a malicious actor to upload any files and execute any code...

Dnsmasq Unauthorized Access

The vulnerability of the DNS server Dnsmasq is related to errors in information processing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

SIMATIC S7 PLC Web Server XSS

The vulnerability of the web server in the SIMATIC S7 PLC is related to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

Silabs CP210x VCP virtual COM port driver Privilege Escalation

The vulnerability of the Silabs CP210x VCP virtual COM port driver is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

LibSer SEPControl Kernel Extension Disclosure

The vulnerability of the LibSerSEPControl Deserialize function in AppleKeyStore kernel extensions for iOS, iPadOS, and macOS is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information that is protected by this...

ThreatSonar Anti-Ransomware Download Arbitrary Command Execution

The vulnerability of the ThreatSonar Anti-Ransomware tool lies in its ability to download files of a malicious nature without limitation. Exploiting this vulnerability allows a remote attacker to execute arbitrary system commands by downloading specially created files...

Oracle Access Manager Authentication Engine Full Control

The vulnerability of the Authentication Engine component in the Oracle Access Manager access control system is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTP network protocol...

Linux SPI Device Driver Use-After-Free

The vulnerability of the mpc52xxspiprobe function in the drivers/spi/spi-mpc52xx.c driver for Linux’s SPI devices is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility...

Linux kernel Cryptographic Subsystem Heap Buffer Overflow DoS

The vulnerability of the acompsavereq function in the crypto/acompress.c module of the Linux kernel cryptographic subsystem relates to access to resources through incompatible types. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Util-linux Error Privilege Escalation

The vulnerability of the Util-linux command-line utility package is related to deficiencies in handling error situations. Exploiting this vulnerability can allow an attacker to increase their privileges...

Composer Dependency Arbitrary Command Execution

The vulnerability of the dependency manager for PHP Composer is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Linux kernel OVPN Network Device Driver

The vulnerability of the ovpnnetxmit function in the drivers/net/ovpn/io.c module of the Linux kernel’s network device driver is related to the pointer being dereferenced after its expiration time. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Linux InfiniBand Driver Use-After-Free

The vulnerability of the isertloginrecvdone function in the drivers/infiniband/ulp/isert/ibisert.c driver of the Linux operating system’s InfiniBand module is related to incorrect assumptions about the organization of data or memory. Exploiting this vulnerability could allow a remote attacker to...

Linux kernel vmci_transport_recv_listen Buffer Overflow DoS

The vulnerability of the vmcitransportrecvlisten function in the net/vmwvsock/vmcitransport.c module, which is part of the networking functions of the Linux kernel, is related to resource management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux kernel zram_bvec_write_partial Heap Buffer Overflow

The vulnerability of the zrambvecwritepartial function in the drivers/block/zram/zramdrv.c module of the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the ivpumsgetinfoioctl function in the drivers/accel/ivpu/ivpums.c kernel module of the Linux operating system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability may allow an attacker to access protected information...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the stratix10rsuprobe function in the drivers/firmware/stratix10-rsu.c file of the Linux kernel firmware driver is related to the pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Linux kernel IVPU Firmware Heap Overflow DoS

The vulnerability of the ivpufwparse function in the drivers/accel/ivpu/ivpufw.c file of the Linux kernel’s acceleration device driver relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

Open edX set_course_mode_price() Gain Access

The vulnerability of the setcoursemodeprice function on the online training platform Open edX is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain access and modify data...

Open edX Platform validate_timestamp_and_nonce() function Unauthenticated Access

The vulnerability of the validatetimestampandnonce function in the online training platform Open edX Platform relates to bypassing the authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions and gain unauthorized access to protected...

Linux kernel IPv6 Sit Function Buffer Overflow DoS

The vulnerability of the ipip6tunnelxmit function in the net/ipv6/sit.c module of the Linux kernel’s IPv6 implementation is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...

Linux Kernel Buffer Overflow DoS

The vulnerability of the skbgroreceivelist function in the net/core/gro.c module of the Linux kernel’s networking functions is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Linux Heap Buffer Overflow DoS

The vulnerability of the rseqexituserupdate function in the include/linux/rseqentry.h module of the Linux kernel is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux SCTP Kernel Heap Buffer Overflow DoS

The vulnerability of the sctpunpackcookie function in the net/sctp/smmakechunk.c module of the Linux operating system’s SCTP protocol implementation is related to improper handling of length parameter mismatches. Exploiting this vulnerability allows a remote attacker to compromise the...

Linux IPv4 Kernel Heap Buffer Overflow DoS

The vulnerability of the ipoptionsget function in the net/ipv4/ipoptions.c module of the Linux kernel’s IPv4 implementation is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the devlinkfree function in the net/devlink/core.c module, which is part of the Linux kernel’s networking functions, stems from the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker to cause service...

Linux Kernel reqsk_queue_hash_req Buffer Overflow DoS

The vulnerability of the reqskqueuehashreq function in the net/ipv4/inetconnectionsock.c module, part of the IPv4 protocol implementation in Linux kernel, relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...

netfilter Heap Buffer Overflow DoS

The vulnerability of the help function in the net/netfilter/nfconntrackirc.c module of the netfilter component of the Linux operating system is related to the issue of data being written outside of the buffer. Exploiting this vulnerability could allow a remote attacker to access protected...

Linux Kernel ebt_snat_tg Buffer Overflow DoS

The vulnerability of the ebtsnattg function in the net/bridge/netfilter/ebtsnat.c module, which implements networking functions in the Linux kernel, is related to the issue of data being written outside of the buffer. Exploiting this vulnerability could allow an attacker to compromise the...

oaktrail_lvds_init Heap Buffer Overflow DoS

The vulnerability of the oaktraillvdsinit function in the drivers/gpu/drm/gma500/oaktraillvds.c driver for the Direct Rendering Infrastructure DRI kernel of the Linux operating system leads to unlimited resource allocation. Exploiting this vulnerability can allow an attacker to cause a service...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the destroycomponentcfg function in the drivers/resctrl/mpamdevices.c module of the Linux kernel is related to the lack of initialization of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux x86/kexec Heap Buffer Overflow DoS

The vulnerability of the relocatekernel function in Linux’s x86/kexec components is related to buffer overflows in the stack. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the auditlogcapset function in the kernel/auditsc.c file of the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel mailbox driver module Heap Buffer Overflow

The vulnerability of the mboxtestprobe function in the drivers/mailbox/mailbox-test.c file of the Linux kernel’s mailbox driver module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux USB TypeC Driver Heap Buffer Overflow DoS

The vulnerability of the ps883xretimerprobe function in the drivers/usb/typec/mux/ps883x.c file of the Linux USB TypeC driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Power Management Driver Max77705 Charger Probe

The vulnerability of the max77705chargerprobe function in the drivers/power/supply/max77705charger.c file of the Linux kernel’s power management driver relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Tenda A18 Router Code Execution

The vulnerability of the fromSetCmdlineRun function in the Tenda A18 router’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Python cryptography Certificate Validation

The vulnerability of the Python programming language’s cryptography interpreter is related to errors in the certificate authentication process. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

Apache ActiveMQ Access Control Bypass

The vulnerability of Apache ActiveMQ-related software is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information...

ImageMagick Integer Overflow DoS

The vulnerability of the console-based graphic editor ImageMagick is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

MongoDB Integer Overflow

The vulnerability of the MongoDB database management system is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Grafana OAuth Authorization DoS

The vulnerability of the OAuth authorization route used by the Grafana monitoring and observation platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

AppAuthentication::verifyCode() MultiFactor Auth Bypass

The vulnerability of the AppAuthentication::verifyCode method in the packages/panels/src/Auth/MultiFactor/App/AppAuthentication.php file of the Filament PHP framework’s Laravel set is related to the possibility of bypassing the authentication process. Exploiting this vulnerability could allow an...

XMLDOM XSS

The vulnerability of the Element.setAttribute method in the XML document access and manipulation module XMLDOM is related to errors in processing XML requests. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

XMLDOM Document.createElement() XSS

The vulnerability of the Document.createElement function in the XML document access and management module, XMLDOM, is related to errors in processing XML requests. Exploiting this vulnerability allows an attacker to bypass existing security mechanisms and perform cross-site scripting attacks XSS...

Linux xhci_irq() Heap Buffer Overflow DoS

The vulnerability of the xhciirq function in the drivers/usb/host/xhci-ring.c file of the Linux USB device driver framework is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux USB Device Driver Heap Buffer Overflow DoS

The vulnerability of the xhcidisableSlot function in the drivers/usb/host/xhci.c module of the Linux device driver framework is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

Direct Rendering Infrastructure Heap Buffer Overflow DoS

The vulnerability of the xesyncentryparse function in the drivers/gpu/drm/xe/xesync.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to insufficient checking of exception conditions. Exploiting this vulnerability could allow an attacker to cause...