196088 matches found
WordPress PayPal deserialization injection vulnerability
WordPress Payee versions 4.8.2 and earlier have a deserialization injection vulnerability. This vulnerability stems from unvalidated PHP object injections, which may lead to remote code execution...
Themegoods DK authorization issue vulnerability
Themegoods DK 3.2.1 and earlier versions have an authorization issue vulnerability. This vulnerability stems from improper access control without authentication, which may allow attackers to modify data without proper authorization...
WordPress Academy LMS has vulnerabilities related to permissions and access control systems.
WordPress Academy LMS versions 4.0.3 and earlier have vulnerabilities related to permission permissions and access control. These vulnerabilities arise from the addchild function, which calls addrole'academystudent' on existing accounts before Store::link verifies the guardianship relationship...
GNOME libsoup buffer error vulnerability
GNOME libsoup has a buffer overflow vulnerability. This vulnerability arises when the max-incoming-payload-size is set to infinity 0. In such cases, libsoup’s SoupWebsocketConnection will expand the incoming GByteArray based on the length of the frame controlled by the attacker. This can lead to ...
GNOME libsoup buffer error vulnerability
GNOME libsoup has a buffer overflow vulnerability. This vulnerability arises because when libsoup constructs WebSocket client frames for extremely large outbound payloads, the size value passed to the GByteArray allocation API may be truncated. However, the masking routine still uses the full...
Cockpit Files: Race Condition Issues
The Cockpit Files vulnerability involves a race condition issue. This issue arises due to a race condition occurring when the cockpit-files directory is created and its owner is assigned. Local, low-privilege attackers can exploit this by controlling the writable parent directory. By replacing th...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the dm-array does not validate the fields of the array block header structure during reading. As a result, out-of-bound reads of the dm-bufio buffer occur when the count exceeds the capacity of the block...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.13 contains a security vulnerability. This vulnerability arises from the lack of verification of the cumulative length of multiple Read segments against the budget of the rqpages array. This may lead to accessing empty pointer slots during DMA mapping, resulting in empt...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from svcrdma not verifying the RPC/RDMA Read chunk position field provided by the remote client. As a result, integer underflow may occur, potentially exposing adjacent slab memory to the upper-level XDR decoder or causing...
Linux Kernel Security Vulnerabilities
The Linux kernel versions from 6.16 to 6.18.57, 7.1.10 before the release, and 7.2 before the release contain security vulnerabilities. These vulnerabilities stem from the release of the AEAD conversion in RCU callbacks. The cryptofreeaead function may become dormant, which could lead to calls to...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that stems from the lack of verification for allocated pointers in opteeffalendprotmem, which may lead to null pointer dereferencing...
Linux Kernel Security Vulnerabilities
There are security vulnerabilities in Linux kernels versions from 2.6.12 to 6.18.57, as well as versions from 2.6.12 to 7.1.10 and from 2.6.12 to 7.2. The vulnerability stems from the ipvsnaticmp function in ipvs, which does not re-validate the ihl field in the embedded IP header read from the sk...
Linux Kernel Security Vulnerabilities
The Linux kernel versions from 7.1 to 7.1.10 contain security vulnerabilities. These vulnerabilities stem from the use of the zcryptmsgtype6sendep11cprb function, which accesses and modifies the domain field in the EP11 CPRB payload by using a vulnerable struct overlays. Additionally, proper...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the mbox handling of nixsetrxmode in VF, where it does not check whether the request comes from a VF. When the promiscuous and allmulti flags are set to false, it is possible to accidentally delete PF’s promiscuous and...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from the ASoC SOF ipc4-control component not verifying the size of theMODULENOTIFICATION notification payload. This could lead to out-of-bounds read attacks...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.14 contains a security vulnerability. This vulnerability stems from the rpcrdmaisbcall function in the xprtrdma module, which does not check the buffer boundary when decoding response packets. This leads to out-of-bounds reads. Additionally, the short header processing...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from an error in the data type of the scan index handled by the rtw89 driver. This error causes an infinite loop during Wi-Fi scanning at the 6GHz frequency band, potentially leading to kernel softlock and...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.7 contains security vulnerabilities. These vulnerabilities stem from a race condition in the makeuffdwphugepte function located in fs/proc/taskmmu.c during updates to prot, which may lead to the loss of hardware Dirty/Accessed updates...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from improper cleanup after the failure of adding the Bluetooth MGMTL adv monitor. This may lead to reuse after release...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.23 has a security vulnerability. This vulnerability arises from insufficient initialization of the lockwork work queue during the re-initialization of the afs inode, which may lead to system warnings...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from improper reference counting management of svcxprt during asynchronous TLS handshake callbacks. Competition conditions may occur, potentially leading to reuse after release and kernel memory corruption...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.15 contains a security vulnerability. This vulnerability arises from incorrect initialization of the device’s RB-tree node. If the device does not support ATS, the insertion operation is skipped. In subsequent detection attempts, the error path initializes the node to...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that stems from accessing isopisk-conn in the isosockgetname function without holding the locksock lock, which may lead to race conditions...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the rungethighestvcn function’s failure to perform length boundary checks when parsing NTFS mapping pairs in the buffer, which may lead to out-of-bounds reads during mounting...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.39 has a security vulnerability. This vulnerability stems from an integer overflow issue in the radeon-alignpitch function. It may lead to overflow of signed integers during alignment rounding addition and final calculations, resulting in the return of an invalid pitc...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities arise from PF attempting to process FASTREQUEST or EVENT messages, which may lead to violation of the VFPF ABI protocol and trigger assertions on the PF side...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the failure to cancel the work items of pre-allocations when the afs network namespace is removed, which may lead to resources not being released properly...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.15 contains a security vulnerability. This vulnerability arises from the fact that during peek operations, net/sched/schcodel discards data packets. Before restoring qlen, qdisctreereducebacklog is called, which may lead to the incorrect disabling of parent categories,...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the modification of the rdma-state field in net/9p/transrdma.c without holding the reqlock lock. This leads to a race condition, which may result in reuse after deallocation...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from the incorrect termination of the netfilter ipset garbage collection mechanism. This could lead to the failure of the garbage collection process to terminate properly...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from improper handling of the state of the addrconfdadfailure function in the ipv6 addrconf module. When addresses are deleted concurrently, it is possible to access already released list items, leading to a kernel crash...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from an error in calculating the allocation size of the flexible array element currentpath within the nvmenshead structure. In systems with sparse NUMA node IDs, this could lead to out-of-array access, resulting in system...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from a failure in the linkconf or linksta lookup during the mt7996txprepareskb routine. As a result, the allocated tx tokens are not released when the lookup fails, potentially leading to token leakage...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.20 contains a security vulnerability. This vulnerability stems from the btrfsrundelayedrefs function in btrfs, which does not set lockedref to NULL when handling the-EAGAIN error pointer returned by btrfsselectrefhead. As a result, invalid pointers may be dereferenced,...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from race conditions in the md/raid5 module, specifically in the breakstripebatchlist and raid5makerequest functions. These race conditions may cause processes to wait indefinitely...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from a missing cleanup call in the error path during the initialization of the dellinit function. This may lead to residual resources such as registered notifiers, debugfs directories, keyboard backlight LEDs, and touchpad LE...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.17 contains a security vulnerability. This vulnerability stems from improper allocation of the HV VHCA stats buffer; zero-sized buffers were allocated, which may lead to null pointer dereferencing and cause the kernel to crash...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities arise from the failure of dmintegritychecklimits, where the locked ranges are not unlocked after the failure, potentially leading to deadlocks...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.16 contains security vulnerabilities. These vulnerabilities stem from the improper handling of 0 count inputs by the dmafencededuparray function, which may lead to dereferencing uninitialized fence slots...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.1 contains security vulnerabilities. These vulnerabilities stem from the fact that the MIPI DSI and CSI domains share clock and reset control bits. This can lead to incorrect behavior when one domain disables shared resources while another domain remains active...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability caused by improper handling of the RDMACMEVENTADDRCHANGE event. Calling rpcrdmaepput before connection establishment leads to a reference count underflow, which may result in reuse after deallocation...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.5 contains security vulnerabilities. These vulnerabilities stem from repeated requests for WC pages with the same ucontext, which may lead to concurrent access issues...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from a cancellation race condition in svctcphandshake. This condition may cause the xptflags variable to be read before it has been submitted as a callback. As a result, handshake calls may be called...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.13 contains security vulnerabilities. These vulnerabilities stem from integer overflows during the calculation of the TVLV length, which could lead to out-of-bounds access...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from an insufficient length check in the brcmfnotifyauthframerx function when processing short authentication frames. As a result, unsigned subtraction recursion can lead to a stack overflow, potentially allowing a remote...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.1 contains a security vulnerability. This vulnerability arises from dmearlycreate attempting to release tables that have been instantiated by dmswaptable when dmresume fails, which may lead to kernel anomalies...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the iSCSI ISID is dereferenced after the REGISTER AND MOVE operation but is still referenced afterward. As a result, it can be reused after being released, potentially leading to memory information leaks o...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.8 contains security vulnerabilities. These vulnerabilities stem from a race condition between the interrupt affinity changes and the disabling of LPI, which may lead to reusing resources after release...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.1 contains security vulnerabilities. These vulnerabilities stem from the netfilter nfnat module, where an invalid natnet pointer is used when nfnatinit fails, potentially leading to out-of-bounds reads...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from insufficient boundary checking during the traversal of the sofdais array by the createsdwdailinks function, which may lead to out-of-bounds reads...