197709 matches found
GnuTLS security vulnerabilities
GnuTLS version 3.8.13 has a security vulnerability. This vulnerability stems from improper certificate verification, causing the application to reject legitimate certificates of legitimate users, potentially leading to denial-of-service attacks...
GnuTLS security vulnerabilities
GnuTLS version 3.8.13 has security vulnerabilities. These vulnerabilities stem from a failure to reject X.509 certificates that contain contradictory combinations of key usage KU and extended key usage EKU. This could allow attackers to obtain sensitive information...
GnuTLS security vulnerabilities
GnuTLS version 3.8.13 has security vulnerabilities. These vulnerabilities arise from the rejection of legitimate CA certificates, which may lead to denial-of-service attacks...
Splunk Enterprise processing logic error vulnerability
Versions of Splunk Enterprise prior to 10.4.3, 10.2.7 prior to version 10.2.7, 10.0.10 prior to version 10.0.0, and 9.4.15 prior to version 9.4.15 have a processing logic vulnerability that stems from a failure of the protection mechanism...
Splunk Enterprise: Permissions licensing and access control issues
Versions of Splunk Enterprise prior to 10.4.3, 10.2.7, 10.0.10, and 9.4.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from improper access control mechanisms, which may allow unauthorized access...
Sungrow iSolarCloud authorization issue vulnerability
Sungrow iSolarCloud versions prior to 2026 have an authorization issue vulnerability. This vulnerability stems from the logintype parameter being set to 5 in the login request, leading to authentication bypass and account takeover, which could potentially cause local power outages in Europe...
Splunk Enterprise resource management error vulnerability
Splunk Enterprise versions prior to 10.4.3, 10.2.7, 10.0.10, and 9.4.15 have a resource management vulnerability caused by improper control of the resource lifecycle...
Foreman permission and access control vulnerabilities
Foreman has vulnerabilities related to permission checks and access control. These vulnerabilities stem from improper permission verification by the template preview endpoint. As a result, authenticated users with low-level Viewer permissions can submit requests to obtain sensitive data such as t...
Ali A. Saleem Anchorme.js Resource Management Error Vulnerability
Ali A. Saleem: Anchorme.js 3.0.8 and earlier versions have a resource management vulnerability. This vulnerability arises from catastrophic backtracking during the extraction of regular expressions from IPv6 hosts, which can lead to Regular Expression Denial-of-Service attacks. Attackers can...
GNOME libsoup buffer error vulnerability
GNOME libsoup has a buffer overflow vulnerability. This vulnerability arises because when libsoup constructs WebSocket client frames for extremely large outbound payloads, the size value passed to the GByteArray allocation API may be truncated. However, the masking routine still uses the full...
GNOME libsoup buffer error vulnerability
GNOME libsoup has a buffer overflow vulnerability. This vulnerability stems from libsoup’s failure to properly limit the total size of WebSocket messages when reassembling them into GByteArray objects. A remote attacker can send specially crafted fragments, leading to size truncation and ultimate...
GNOME libsoup buffer error vulnerability
GNOME libsoup has a buffer error vulnerability. This vulnerability arises from the handling of incoming WebSocket Pong frames. SoupWebsocketConnection sends the ::pong signal using a GByteArray pointer. Since this signal is declared to be passed as GBytes, processes that follow the GBytes API may...
GNOME libsoup buffer error vulnerability
GNOME libsoup has a buffer overflow vulnerability. This vulnerability arises when the max-incoming-payload-size is set to infinity 0. In such cases, libsoup’s SoupWebsocketConnection will expand the incoming GByteArray based on the length of the frame controlled by the attacker. This can lead to ...
Eleveo Call Recording Software has a cross-site scripting vulnerability
Eleveo Call Recording Software version 9.7.0 has a security vulnerability. This vulnerability stems from improper handling of parameters viewRoleId/cfType in the Play Audio Page component, which may lead to cross-site scripting attacks...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.3 contains a security vulnerability. This vulnerability stems from the fact that the svcauthgssdecodecredbody function in SURNPRPC does not reset the caller’s rpcgsswirecred at its entry point. As a result, residual state from previous requests remains after decoding...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities arise from the use of the vxlanmdbFlush function, which iterates through MDB entries using hlistforeachentrySafe. Deleting one entry can trigger the deletion of another entry, leading to reclamation after releas...
Linux Kernel Security Vulnerabilities
The Linux kernel version 7.1 contains a security vulnerability. This vulnerability stems from the fact that RDMA/bnxtre verifies udata only after removing the driver resources. As a result, the destruction callback can still run again when the resources have been released, potentially leading to...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.15 contains security vulnerabilities. These vulnerabilities arise from the failure to clean up the typec switch when detection fails, resulting in resource leaks for the typec switch...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.19 contains a security vulnerability. This vulnerability stems from the tc9563 driver in the PCI/pwrctrl subsystem, which incorrectly parses two physical functions when integrating the Ethernet MAC Endpoint node. As a result, access beyond the tc9563pwrctrl-cfg array is...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.7 contains a security vulnerability. This vulnerability stems from the lack of a read memory barrier in the retry mechanism for the rpcstatusget dumpit sequence count. On weakly ordered architectures, this could lead to CPU reordering of field reads, rendering the retry...
GIMP buffer error vulnerability
GIMP has a buffer error vulnerability. This vulnerability arises from the fact that when processing specially crafted GIMPressionist preset files, GIMP plugins incorrectly validate vector indices before writing to fixed-size arrays. This can lead to out-of-bounds writes, memory corruption, and...
Linux Kernel Security Vulnerabilities
The Linux kernel versions from 6.12.35 to 6.12.109, 6.15.4 to 6.16, and 6.16 contain security vulnerabilities. These vulnerabilities stem from the fact that the function rvrdmardmaaccept fails to check rndone before calling rpcrdmarnunregister, resulting in an unbalanced reference count and...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.9 has a security vulnerability. This vulnerability arises from the function gbaudiogbgettopology, which retrieves topology data based on the sizes provided per module. However, the function gbaudiotplgparsedata does not verify whether the segment sizes of sizedais,...
Linux Kernel Security Vulnerabilities
Versions of the Linux kernel prior to 6.18.51 and 7.2.5 contain security vulnerabilities. These vulnerabilities stem from LoongArch’s undefined DIRECTMAPPHYSMEMEND, which allows for out-of-bounds searches in functions like getfreememregion and mhpgetpluggablerange. Additionally, vmemmappopulate m...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.16 contains a security vulnerability. This vulnerability stems from a loop in the ppldoflush function that continues iterating after calling ppliounitfinished, resulting in access to io-pendingflushes. This could lead to reuse of resources after they have been released...
GNU Emacs code injection vulnerability
GNU Emacs versions prior to 31.2 have a code injection vulnerability. This vulnerability arises from the Flymake mode, which, when using non-Lisp language backends, executes arbitrary code from the edited files during syntax checking. This could allow an attacker to execute arbitrary code with th...
Plex Media Server cross-site scripting vulnerabilities
Versions of Plex Media Server prior to 1.43.3.10861 contain a cross-site scripting vulnerability. This vulnerability arises from improper neutralization of URL values in “searchOne”, which may allow attackers to call functions of other plugins and provide their own parameters...
Cockpit Files: Backlink Vulnerability
Cockpit Files has a postback link vulnerability. This vulnerability arises from Cockpit-Files’ improper handling of directories that contain symbolic links. Low-privilege local users can exploit the “Paste as owner” feature to change the ownership of files anywhere other than the intended...
Cockpit Files: Race Condition Issues
The Cockpit Files vulnerability involves a race condition issue. This issue arises due to a race condition occurring when the cockpit-files directory is created and its owner is assigned. Local, low-privilege attackers can exploit this by controlling the writable parent directory. By replacing th...
RESTEasy security vulnerabilities
RESTEasy has a security vulnerability. This vulnerability stems from CorsFilter, which, when configured to allow all origins, reflects the Request-Origin header in the Access-Control-Allow-Origin response and allows credentials to be carried along. This can enable malicious websites to initiate...
RESTEasy Resource Management Error Vulnerability
RESTEasy has a resource management vulnerability. This vulnerability stems from the fact that IIOImageProvider does not impose any restrictions on the declared image size or number of pixels when decoding image requests provided by attackers. This allows unauthenticated remote attackers to send...
Amazon-VPC-CNI-K8S input validation error vulnerability
Amazon-VPC-CNI-K8S versions prior to 1.14.0 to 1.22.4 have a vulnerability related to input validation errors. This vulnerability stems from improper verification of Pod identifiers. It may allow authenticated remote users to create Pod identifiers that conflict with existing ones, thereby...
Environment Module Command Injection Vulnerability
Environment modules have a command injection vulnerability. This vulnerability arises when a local attacker places a maliciously named modulefile in a visible location within the victim’s MODULEPATH. When the victim uses Bash completion for the module or the ml command, the malicious module name,...
GIMP numerical error vulnerability
GIMP has a numerical error vulnerability. This vulnerability arises from the file-psd plugin, which generates thumbnail previews of specially crafted PSD image files. During this process, integer overflow occurs due to the multiplication of embedded JPEG header values. This leads to insufficient...
GIMP buffer error vulnerability
GIMP has a buffer error vulnerability. This vulnerability stems from the Lighting Effects filter in GIMP, which fails to correctly verify the number of light sources when processing specially crafted lighting preset files. This can lead to out-of-bounds writes and memory corruption. Attackers can...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that ipmiaddsmi only removes the nrusers file when registration fails, but does not remove the nrmsgs file. As a result, the sysfs attributes of interfaces that have been released may remain registered...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the dm-array does not validate the fields of the array block header structure during reading. As a result, out-of-bound reads of the dm-bufio buffer occur when the count exceeds the capacity of the block...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from an error in the initiation of the IPMI interface; tasks that have been scheduled are not canceled before releasing the interface, potentially leading to reuse after release...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the bpfgetstack function in bpf, which does not disable preemption during the process of obtaining per-CPU callchain entries and copying them to the caller’s buffer. This allows other tasks on the same CPU to reuse this...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from svcrdma not verifying the RPC/RDMA Read chunk position field provided by the remote client. As a result, integer underflow may occur, potentially exposing adjacent slab memory to the upper-level XDR decoder or causing...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.15 contains security vulnerabilities. These vulnerabilities stem from lifecycle issues with the CXL MCE notifier, which may lead to null pointer dereferencing and reuse of resources after memory management operations...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.14 contains a security vulnerability. This vulnerability arises from the use of qnapmcuexec, which exposes the stack-based receive buffer to the unsynchronized serdev receive path. In cases where commands fail or writes fail, delayed responses or unrequested messages ma...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.14 contains security vulnerabilities. These vulnerabilities stem from the fact that functions smcllcrmtdeleterkey and smcllcsaveaddlinkrkeys do not apply proper boundary checks based on the actual length of the messages received. This allows for out-of-bounds reads,...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from the cachereplay function in dm-pcache, as well as the write-back worker threads and GC worker threads. In these functions, the length of the tail read from kset is determined by PCACHESEGSIZE - segoff...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the mt7925 driver, which fails to cancel the mlopmwork when the device is reset, suspended, or logged out. This could lead to access to released vif/bss data or the sending of MCU commands when the firmware is unavailabl...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from svcrdma not checking whether the size of the reply exceeds the pull-up buffer when handling RPC-over-RDMA inline replies. As a result, svcrdmaxblinearize copies data beyond the end of the buffer, causing damage to adjace...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.13 contains a security vulnerability. This vulnerability arises from the lack of verification of the cumulative length of multiple Read segments against the budget of the rqpages array. This may lead to accessing empty pointer slots during DMA mapping, resulting in empt...
Linux Kernel Security Vulnerabilities
The Linux kernel versions 6.14.3 to 6.15 contain security vulnerabilities. These vulnerabilities stem from the mt7925 process queuing mlopmwork with a 5-second delay during multi-link power-saving settings. If this work is not canceled in the stop path, and if the device is removed within that ti...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the fact that ipastartxmit stops the TX queue unconditionally before calling pmruntimeget. The reawakening of the queue during runtime is prematurely consumed, resulting in a permanent stagnation of the transmission queu...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from the lack of verification of geometric fields such as nsegs and segment id from the disk cacheinfo. This can lead to out-of-bounds reading and writing...