196327 matches found
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.3 has a security vulnerability. This vulnerability stems from the use of hcichansent, which accesses chan-conn after releasing the RCU read lock and returns the channel. The ACL and LE scheduler utilize their data packet queues and update the send counter even when...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the EDAC/altera driver, which marks the setup callback and auxiliary functions of a10 EDAC as init. These functions may execute after memory release during the probe path, resulting in the dereferencing of already releas...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.7 contains a security vulnerability. This vulnerability stems from the bpfjitblindinsn function, which, when handling backward jumps, reduces the offset of jumps of type s16 by 2, leading to an overflow and a loop. This causes the jump to occur at the end of the program...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.26 contains security vulnerabilities. These vulnerabilities stem from race conditions between the tty break ioctl and hang operations. TCSBRK and TCSBRKP are not terminated in time, which may lead to the callback of the tty driver for devices that have been removed...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.2 contains security vulnerabilities. These vulnerabilities arise from the fact that pointers in the extensions area are added to the expectations list when calling the helper function. Subsequent reallocations of the extensions cause these pointers to become invalid. Wh...
Linux Kernel Security Vulnerabilities
Versions of the Linux kernel prior to 7.2.10 contain security vulnerabilities. These vulnerabilities stem from improper lifecycle management of NVMe cdevs. In multi-path mode, cdevs that have been disabled after the removal of NS heads can still be called, potentially leading to reuse after...
Vita3K path traversal vulnerability
Vita3K has a path traversal vulnerability. This vulnerability stems from a path traversal Zip Slip issue in the installarchivecontent function. Attackers can write files outside of the installation directory using the “..” path segment or absolute paths within a specially crafted.vpk compressed...
Dyad Cross-Site Request Forgery Vulnerability
Dyad 1.16.0 and earlier versions have a security vulnerability. This vulnerability stems from improper handling of the OAuth Callback Handler component, which may allow remote attackers to launch cross-site request fraud attacks...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.2 contains a security vulnerability. This vulnerability stems from the net/sched actct module, which modifies shared unacknowledged CT entries when processing cloned skb objects with unacknowledged CT entries. This could lead to reuse after deallocation...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.3 contains a security vulnerability. This vulnerability arises from the possibility that rt6insertexception may be called after fib6info is removed through fib6purgert. As a result, rt6Flushexceptions no longer sets the flags, leading to the successful creation of new...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.1 contains security vulnerabilities. These vulnerabilities stem from the BPF validation and instruction rewiring process, where signals are not checked and no re-scheduling occurs. A large number of unconditional jumps must be processed one by one, leading to a quadrati...
Linux Kernel Security Vulnerabilities
There are security vulnerabilities in Linux kernels versions 6.12.112 to 6.13, 6.18.55 to 6.19, and 7.0. These vulnerabilities stem from the function bpfmasetdtor, which copies map-record but does not maintain the BTF reference within the destructor context. As a result, the working queue still...
Omnigent path traversal vulnerability
In versions prior to Omnigent 0.14.0 and 0.3.0, there was a path traversal vulnerability. This vulnerability stems from path traversal attacks. Certified users can escape the working directory by setting up nested sub-proxies in os.env.cwd. They can also upload bundles that utilize absolute or...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.7 contains a security vulnerability. This vulnerability arises from the getmtddevice function, which calls the getdevice callback of the main MTD. During this process, the mtd parameter passed in may be a partition. However, the putmtddevice function passes in the main...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.18 contains security vulnerabilities. These vulnerabilities arise from the lack of cancellation of the wake-up process when a device is removed. Additionally, remote wake-up requests may re-trigger this process after it has been canceled, leading to reuse after release...
Ravi Teja Online-Examination-System Input Verification Error Vulnerability
Ravi Teja Online-Examination-System has a security vulnerability. This vulnerability stems from the improper handling of parameters in the exammanger.php file within the AJAX Endpoint component’s MySQLDB::topicslist function. It may lead to SQL injection attacks...
Linux Kernel Security Vulnerabilities
Versions of the Linux kernel prior to 7.2.7 contain security vulnerabilities. These vulnerabilities arise from SMB servers failing to cancel asynchronous requests that are still pending when closing connections, resulting in connections not being able to be closed properly...
Ravi Teja Online-Examination-System Authorization Issues Vulnerability
Ravi Teja Online-Examination-System e6208e630b14657999bbfe4c9912302d2a1e2449 and previous versions have an authorization issue vulnerability. This vulnerability stems from the lack of authentication for the isAdmin function in the admin/admin.php file, which may allow remote attackers to bypass...
Schism Tracker buffer error vulnerability
Schism Tracker 20260524 and earlier versions have a buffer error vulnerability. This vulnerability stems from the fmtultloadsong function in fmt/ult.c, which does not limit the number of single-byte samples to MAXSAMPLES. This may lead to out-of-buffer writing, allowing attackers to provide a...
Plane Labs Plane: Input validation vulnerability
Plane Labs’ Plane 1.4.2 and earlier versions have a vulnerability related to input validation errors. This vulnerability stems from improper handling of the X-Forwarded-For parameter by the API Endpoint component. The system relies on untrusted inputs in its security decisions, which could allow...
Linux Kernel Security Vulnerabilities
The Linux kernel version 7.2 contains a security vulnerability. This vulnerability arises from the use of canceldelayedwork, which does not wait for the ongoing work callbacks to complete during the removal process. As a result, the callbacks are executed concurrently with hidhwclose and hidhwsto...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.2 contains a security vulnerability. This vulnerability arises from the premature release of backreferences when associating with non-transmission MBSSID configuration files. Subsequently, the same element pointers are still used to determine the working channel,...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.16 contains a security vulnerability. This vulnerability stems from the wacomwacpenserialenforce function, which calculates and passes an invalid offset to hidfieldextract, resulting in out-of-bounds memory access and potentially leading to information leakage...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.10 contains a security vulnerability. This vulnerability stems from the meshpathadd function in net/mac80211/meshpathtbl.c, which does not release the reserved mesh path quotas when path allocation or insertion fails. This can lead to repeated failures or repeated...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.5 contains a security vulnerability. This vulnerability arises when the ARP ioctl function copies the struct arpreq provided by the user into the stack object. In this process, the arpdev field may lack a NUL terminator. When checking the device name, the strcmp functio...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.6 contains security vulnerabilities. These vulnerabilities stem from the htabmaplookupanddeletebatch function not having a re-scheduling point, which may lead to a CPU soft lock...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.12 has a security vulnerability. This vulnerability arises from the virtual console failing to execute the conshouldupdate check when processing the ESC 8 path during DEC alignment tests. As a result, after changing the font size in the invisible virtual console, the...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.10 contains security vulnerabilities. These vulnerabilities stem from the vmgenid driver, which does not set the driverdata before registering the notification handler. When an interrupt occurs, the handler dereferes a null pointer, which may lead to kernel crashes...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.14 contains a security vulnerability. This vulnerability arises from the failure to cancel the PS delivery process promptly when deleting an AP or mesh station. The function stadeliverpsframes only checks sta-dead before delivery. As a result, delayed work threads may...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.10 contains a security vulnerability. This vulnerability arises from handling empty FILS-related request payloads, where zero-length allocations return ZEROSIZEPTR. In this process, sginitone places invalid pages into the scatterlist, which may trigger a kernel bug or...
Xorbits Inference Path Traversal Vulnerability
Xorbits Inference versions 4.0.1 and earlier have a path traversal vulnerability. This vulnerability arises due to the backslash sequence in the modelname parameter on Windows, which allows for path traversal. Unauthenticated attackers can register persistent custom models via POST...
Lode Vandevenne has a buffer error vulnerability
Lode Vandevenne’s lodepng 20261006 and earlier versions have a buffer error vulnerability. This vulnerability stems from the lodepng::getFilterTypesInterlaced function in lodepngutil.cpp, which fails to perform boundary checks on the decompressed IDAT data. As a result, a stack overflow attack is...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.3 contains a security vulnerability. This vulnerability stems from the use of “Exception info %s” in the btintelHWerror function, where the print statement utilizes skb-data + 1. Additionally, the 12-byte payload does not end with NULs, potentially leading to excessive...
Automatic1111 Stable Diffusion web UI input validation error vulnerability
Automatic1111 Stable Diffusion’s web UI versions prior to 1.10.1 have a security vulnerability. This vulnerability stems from the improper handling of the Target parameter in the getobjfromstr function located in the modules/sdmodels.py file. It may lead to code injection, allowing attackers to...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.10 contains security vulnerabilities. These vulnerabilities stem from the use of st-lock serialization transactions in the access path to AXI ADC registers. However, the detection function does not initialize this mutual exclusion lock before registering it with the...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.18 contains security vulnerabilities. These vulnerabilities stem from the fact that the tcpwritecollapsefence function does not take effect when skwritequeue is empty. This may lead to the merging of skb packets across device encryption boundaries during retransmission ...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.4 contains a security vulnerability. This vulnerability arises from the fact that the stackslotobjgetspi function does not reject non-negative offsets. When the offset is 0, the calculated spi index is the same as the valid stack slot at fp-8. This may lead to...
Linux Kernel Security Vulnerabilities
There are security vulnerabilities in Linux kernels versions 5.15.137 to 5.16, 6.1.60 to 6.2, and 6.2 itself. These vulnerabilities stem from the function iiodeviceunregister, which disables all buffers without acquiring mlock. This can lead to the buffer state including activescanmask becoming...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.0 contains security vulnerabilities. These vulnerabilities arise from the lack of initialization of the IRQ state, MMIO address, and spinlock before requesting the alarm IRQ. Additionally, devmrequestirq enables the interrupt before returning, which may cause the...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.13 has a security vulnerability. This vulnerability stems from the threaded IRQ handler in the gp2ap020a00f driver, which queues data-work through the irqworkqueue. However, the freeirq function does not refresh the queued irwork, resulting in the work continuing to run...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.10 contains security vulnerabilities. These vulnerabilities stem from xfs failing to release the orphanage directory inode’s igrab reference when chown fails, resulting in a reference leak...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the sctpwaitforconnect function releasing the socket lock during sleep. Additionally, the shutdown mechanism does not check this state before reusing the connection after setting RCVSHUTDOWN. This could lead to the...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.35 has a security vulnerability. This vulnerability arises from hifusbtx, which limits TX aggregation by the number of records, rather than by the cumulative byte length. As a result, memcpy may exceed the bounds and write data into txbuf-buf, potentially causing memo...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.35 has a security vulnerability. This vulnerability stems from the ath9kwmirspcallback function, which copies data according to the number of bytes expected by the wait command after removing the verified WMI headers. However, it does not verify the length of the...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.12 has security vulnerabilities. These vulnerabilities stem from the fact that the LBLCR and LBLC caches in ipvs are not limited in their growth. Functions like ipvslblcrnew and ipvslblcnew create cache entries for each unseen target address. However, maxsize only...
Gitea security vulnerabilities
Gitea versions 28.1.0 and earlier have security vulnerabilities. These vulnerabilities stem from the fact that when parsing SSH certificates, the system searches for all stored public keys rather than just the main key. If a user trusts the certificate authority and accepts any main key, it may...
Automatic1111 Stable Diffusion web UI cross-site scripting vulnerability
Automatic1111 Stable Diffusion’s web UI versions prior to 1.10.1 have a security vulnerability. This vulnerability stems from an incorrect operation of the readmetadatafromsafetensors function in the Extra-Networks Card Builder component, specifically in the modules/sdmodels.py file. This incorre...
libLAS buffer error vulnerability
LibLAS versions 1.8.1 and earlier have a buffer error vulnerability. This vulnerability arises from the point record reader truncating the schema byte size to 16 bits when calculating the point buffer size. An attacker can create a .las file with a schema exceeding 65,535 bytes, resulting in...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.1 contains security vulnerabilities. These vulnerabilities stem from the smb client’s failure to properly handle the CREATE response and FID in compound requests when caching directories fails, which can lead to abnormal handle management...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.16 contains a security vulnerability. This vulnerability arises from the fact that the KVM’s SEV mechanism does not perform cache maintenance on the source virtual machine during the migration of the host. As a result, outdated data remains in the CPU cache after the...