EIP Stack Group OpENER security vulnerability

EIP Stack Group OpENer v2.3 version contains a security vulnerability. This vulnerability stems from an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection path resolver, which could allow remote attackers to cause a denial-of-service attack...

MynaParrot Plug-N-Meet – A scalable, customizable, open-source web conferencing system with path traversal vulnerabilities

MynaParrot Plug-N-Meet – A scalable, customizable, open-source web conferencing system. Versions 2.5.2 and earlier have a path traversal vulnerability. This vulnerability stems from a path traversal issue with the whiteboard conversion endpoint. Attackers can provide a /../ sequence, use a...

EIP Stack Group OpENER security vulnerability

EIP Stack Group OpENer v2.3.0 version contains a security vulnerability. This vulnerability arises from an out-of-bounds read in the unconnected explicit message path, which could be exploited by remote attackers to cause a denial-of-service attack...

ProcessMaker SQL Injection Vulnerability

Versions of ProcessMaker prior to 2026.14.3 have a SQL injection vulnerability. This vulnerability stems from the unvalidated orderby parameter in the GET /api/1.0/tasks endpoint. The orderby parameter is bound to user-controlled processrequests column names, which are used in the DB::raw SQL...

GnuTLS security vulnerabilities

GnuTLS version 3.8.13 has security vulnerabilities. These vulnerabilities arise from the rejection of legitimate CA certificates, which may lead to denial-of-service attacks...

GnuTLS security vulnerabilities

GnuTLS version 3.8.13 has security vulnerabilities. These vulnerabilities stem from a failure to reject X.509 certificates that contain contradictory combinations of key usage KU and extended key usage EKU. This could allow attackers to obtain sensitive information...

GnuTLS security vulnerabilities

GnuTLS version 3.8.13 has a security vulnerability. This vulnerability stems from improper certificate verification, causing the application to reject legitimate certificates of legitimate users, potentially leading to denial-of-service attacks...

Splunk Enterprise processing logic error vulnerability

Versions of Splunk Enterprise prior to 10.4.3, 10.2.7 prior to version 10.2.7, 10.0.10 prior to version 10.0.0, and 9.4.15 prior to version 9.4.15 have a processing logic vulnerability that stems from a failure of the protection mechanism...

Splunk Enterprise: Permissions licensing and access control issues

Versions of Splunk Enterprise prior to 10.4.3, 10.2.7, 10.0.10, and 9.4.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from improper access control mechanisms, which may allow unauthorized access...

Splunk Enterprise resource management error vulnerability

Splunk Enterprise versions prior to 10.4.3, 10.2.7, 10.0.10, and 9.4.15 have a resource management vulnerability caused by improper control of the resource lifecycle...

Sungrow iSolarCloud authorization issue vulnerability

Sungrow iSolarCloud versions prior to 2026 have an authorization issue vulnerability. This vulnerability stems from the logintype parameter being set to 5 in the login request, leading to authentication bypass and account takeover, which could potentially cause local power outages in Europe...

Foreman permission and access control vulnerabilities

Foreman has vulnerabilities related to permission checks and access control. These vulnerabilities stem from improper permission verification by the template preview endpoint. As a result, authenticated users with low-level Viewer permissions can submit requests to obtain sensitive data such as t...

GNOME libsoup buffer error vulnerability

GNOME libsoup has a buffer overflow vulnerability. This vulnerability stems from libsoup’s failure to properly limit the total size of WebSocket messages when reassembling them into GByteArray objects. A remote attacker can send specially crafted fragments, leading to size truncation and ultimate...

GNOME libsoup buffer error vulnerability

GNOME libsoup has a buffer error vulnerability. This vulnerability arises from the handling of incoming WebSocket Pong frames. SoupWebsocketConnection sends the ::pong signal using a GByteArray pointer. Since this signal is declared to be passed as GBytes, processes that follow the GBytes API may...

GNOME libsoup buffer error vulnerability

GNOME libsoup has a buffer overflow vulnerability. This vulnerability arises when the max-incoming-payload-size is set to infinity 0. In such cases, libsoup’s SoupWebsocketConnection will expand the incoming GByteArray based on the length of the frame controlled by the attacker. This can lead to ...

GNOME libsoup buffer error vulnerability

GNOME libsoup has a buffer overflow vulnerability. This vulnerability arises because when libsoup constructs WebSocket client frames for extremely large outbound payloads, the size value passed to the GByteArray allocation API may be truncated. However, the masking routine still uses the full...

Ali A. Saleem Anchorme.js Resource Management Error Vulnerability

Ali A. Saleem: Anchorme.js 3.0.8 and earlier versions have a resource management vulnerability. This vulnerability arises from catastrophic backtracking during the extraction of regular expressions from IPv6 hosts, which can lead to Regular Expression Denial-of-Service attacks. Attackers can...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.7 contains a security vulnerability. This vulnerability stems from the lack of a read memory barrier in the retry mechanism for the rpcstatusget dumpit sequence count. On weakly ordered architectures, this could lead to CPU reordering of field reads, rendering the retry...

GIMP buffer error vulnerability

GIMP has a buffer error vulnerability. This vulnerability arises from the fact that when processing specially crafted GIMPressionist preset files, GIMP plugins incorrectly validate vector indices before writing to fixed-size arrays. This can lead to out-of-bounds writes, memory corruption, and...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.9 has a security vulnerability. This vulnerability arises from the function gbaudiogbgettopology, which retrieves topology data based on the sizes provided per module. However, the function gbaudiotplgparsedata does not verify whether the segment sizes of sizedais,...

Cockpit Files: Race Condition Issues

The Cockpit Files vulnerability involves a race condition issue. This issue arises due to a race condition occurring when the cockpit-files directory is created and its owner is assigned. Local, low-privilege attackers can exploit this by controlling the writable parent directory. By replacing th...

Cockpit Files: Backlink Vulnerability

Cockpit Files has a postback link vulnerability. This vulnerability arises from Cockpit-Files’ improper handling of directories that contain symbolic links. Low-privilege local users can exploit the “Paste as owner” feature to change the ownership of files anywhere other than the intended...

Environment Module Command Injection Vulnerability

Environment modules have a command injection vulnerability. This vulnerability arises when a local attacker places a maliciously named modulefile in a visible location within the victim’s MODULEPATH. When the victim uses Bash completion for the module or the ml command, the malicious module name,...

GIMP numerical error vulnerability

GIMP has a numerical error vulnerability. This vulnerability arises from the file-psd plugin, which generates thumbnail previews of specially crafted PSD image files. During this process, integer overflow occurs due to the multiplication of embedded JPEG header values. This leads to insufficient...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.13 contains a security vulnerability. This vulnerability arises from the lack of verification of the cumulative length of multiple Read segments against the budget of the rqpages array. This may lead to accessing empty pointer slots during DMA mapping, resulting in empt...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from svcrdma not checking whether the size of the reply exceeds the pull-up buffer when handling RPC-over-RDMA inline replies. As a result, svcrdmaxblinearize copies data beyond the end of the buffer, causing damage to adjace...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the bpfgetstack function in bpf, which does not disable preemption during the process of obtaining per-CPU callchain entries and copying them to the caller’s buffer. This allows other tasks on the same CPU to reuse this...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from svcrdma not verifying the RPC/RDMA Read chunk position field provided by the remote client. As a result, integer underflow may occur, potentially exposing adjacent slab memory to the upper-level XDR decoder or causing...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the dm-array does not validate the fields of the array block header structure during reading. As a result, out-of-bound reads of the dm-bufio buffer occur when the count exceeds the capacity of the block...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the fact that file range information in fanotify is triggered during task stack construction. After the event is canceled, the reader still accesses stack memory that has been released, leading to reutilization of that...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the bnxt driver not writing to the doorbell when SW USO path returns NETDEVTXBUSY prematurely, which may cause the TX queue to become stalled...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.17 contains security vulnerabilities. These vulnerabilities stem from the Renesas I3C driver, which fails to check whether the transfer is still valid during interrupt handling. As a result, memory that has been freed may still be accessed after the transfer times out a...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the fact that the ucmawritecmevent function in RDMA/ucma does not access ctx-file under program lock, leading to a race condition with the ucmamigrateid migration. This results in listadd being corrupted and the mutex lo...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.7 contains security vulnerabilities. These vulnerabilities stem from detection errors in functions like chargermanagerremove and errregextcon. These errors allow the regulator to be released before the powersupply sysfs entry is removed. Concurrent writes to the...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from the lack of verification of geometric fields such as nsegs and segment id from the disk cacheinfo. This can lead to out-of-bounds reading and writing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.15 contains security vulnerabilities. These vulnerabilities stem from the fact that the fwctlcmdrpc function does not check the opsize parameter controlled by the user, allowing for out-of-bounds reads, which may lead to kernel crashes or information leaks...

OpenPrinting CUPS: CUPS input validation error vulnerability

OpenPrinting CUPS has a vulnerability in input validation. This vulnerability stems from the CUPS scheduler’s failure to properly validate usernames during the printer ACL verification and private attribute filtering, when the path exceeds the main authorization path. As a result, the comparison ...

Rsyslog buffer error vulnerability

Rsyslog has a buffer error vulnerability. This vulnerability stems from the RainerScript replace function in rsyslog, which incorrectly calculates the buffer size during string replacement. This leads to memory corruption. Unauthorized remote attackers can trigger a heap buffer overflow by sendin...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the fact that ipvlan devices do not inherit neededheadroom and neededtailroom from phydev. As a result, insufficient space is reserved for the headers and tails of data packets during upper-layer calculations. This coul...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the use of snprintf in modestring, which may return a number of bytes that exceed the remaining buffer space. The showmodes function does not check whether the returned value reaches PAGESIZE when accumulating it; as a...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the focaltechprocess-rel Packet function not setting the finger index as an unsigned type. When the index is 0, subtracting 1 causes an array out-of-bounds write, potentially leading to kernel memory corruption, privileg...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.8 contains security vulnerabilities. These vulnerabilities stem from reference counting conflicts between garbage collection and swap operations in netfilter’s ipset module. The functions ipsetputbyindex and ipsetswap may execute in a conflicting manner, leading to...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from SCTP’s handling of COOKIEECHO, where it does not verify the RANDOM, HMAC, and CHUNKS parameters of the cookie. Forgeries of these parameters can lead to out-of-bounds reads and writes, potentially allowing for local...

Linux Kernel Security Vulnerabilities

The Linux kernel versions from 6.10 to 7.2 contain security vulnerabilities. These vulnerabilities stem from improper calculations of rctx-cryptlen in the tegragcmdoonereq function. When the tegragcmsetauthsize function is not called, ctx-authsize remains zero. This can lead to out-of-bounds writ...

Linux Kernel Security Vulnerabilities

The Linux kernel versions from 6.16 to 6.18.57, 7.1.10 before the release, and 7.2 before the release contain security vulnerabilities. These vulnerabilities stem from the release of the AEAD conversion in RCU callbacks. The cryptofreeaead function may become dormant, which could lead to calls to...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the failure to reset the abnormally large DSS field during the processing of the mptcp option. A remote attacker can send specially craftedDSS messages, resulting in inconsistent data or access to uninitialized data...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from libceph failing to check the invalid osd index of primarytemp in the corrupted osdmap received from Ceph monitors or OSDs. As a result, out-of-bounds access occurs when reading the osdstate, osdweight, and osdaddr arrays...

Linux Kernel Security Vulnerabilities

The Linux kernel versions from 6.15 to 7.2 contain security vulnerabilities. These vulnerabilities arise from canceling the IRQ affinity notifier while holding the netdev lock, causing synchronous waiting for callbacks and canceling tasks, which may lead to deadlocks and cause denial of service...

Linux Kernel Security Vulnerabilities

The Linux kernel versions from 7.1 to 7.2 contain security vulnerabilities. These vulnerabilities stem from the absence of input validation in the xcrbmsgtotype6cprbmsgx function. Arithmetic overflows during CEIL4 alignment and summation calculations can bypass size checks. Additionally, the...

Linux Kernel Security Vulnerabilities

The Linux kernel versions 7.1 and earlier contain security vulnerabilities. These vulnerabilities stem from the functions xcrbmsgtotype6cprbmsgx and xcrbmsgtotype6ep11cprbmsgx, which copy user-space messages to the kernel buffer without aligning them to a 4-byte length. As a result, up to 3 bytes...