WSO2 Enterprise Integrator command injection vulnerability

WSO2 Enterprise Integrator has a command injection vulnerability. This vulnerability stems from improper input validation in the Management Console’s handling of JDBC user storage configurations. It may allow attackers to execute arbitrary code on affected servers with WSO2 product privileges...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.1 contains security vulnerabilities. These vulnerabilities arise from the lack of holding of hcidevlock during the enhanced SCO setup process. The CVSD capability check and the operation of findnextescoparam that dereferences conn-parent and releases the parent object o...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.10 contains security vulnerabilities. These vulnerabilities stem from the vmgenid driver, which does not set the driverdata before registering the notification handler. When an interrupt occurs, the handler dereferes a null pointer, which may lead to kernel crashes...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.34 contains security vulnerabilities. These vulnerabilities arise from the use of device-type reserved link layer header space in llcallocframe. Insufficient reservation for VLAN and other stacked Ethernet devices leads to a potential underflow of the skb header space...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises when SCTP processes bundled packets that contain outdated Cookie errors. As a result of this error, the non-primary transmission is deleted, but the subsequent DATA blocks still reference the deleted transmission. This allow...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.8 has a security vulnerability. This vulnerability arises from the HID ALP driver failing to clear the released data-input2 pointer after input2 registration failed. The U1SPABSOLUTEREPORTID report triggers the u1rawevent function to dereference this pointer, allowing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.19 has a security vulnerability. This vulnerability stems from improper locking and serialization in Bluetooth SMP remote OOB data access. The buildpairingcmd function searches for and copies remote OOB data without holding the hdev-lock. This may lead to post-release...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.17 contains a security vulnerability. This vulnerability arises from the fact that when setting the Rx coalesce parameters before the interface is initially opened, the bcmgenetsetrxcoalesce function accesses ring-priv which points to NULL. This leads to a null pointer...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.5 contains a security vulnerability. This vulnerability stems from the failure of uvpagein after kvmppcsvmpagein, resulting in the unallocated secure device pages not being released. This leads to leaks of secure memory pool entries and pvt structures. The GFN remains...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.0 contains a security vulnerability, which stems from the lack of range checks on doprocintconvmsjiffiesminmax...

Automatic1111 Stable Diffusion web UI resource management error vulnerability

Automatic1111 Stable Diffusion’s web UI versions prior to 1.10.1 have a resource management vulnerability. This vulnerability stems from an improper handling of the header length field parameter in the readmetadatafromsafetensors function within the Metadata Extraction component’s file...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.16 contains a security vulnerability. This vulnerability stems from the fact that the st21nfcahcii2crepack function does not verify the size of the received frames. When removing byte padding from deformed frames, data outside the current skb length may be read, resulti...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.15 contains a security vulnerability. This vulnerability stems from the ofoverlayfdtapply function in of/overlay, which checks the return value of idralloc before execution. If this function fails, a negative ID passes the check, and uninitialized ovcs-ovcslist is...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.16 contains a security vulnerability. This vulnerability arises from the fact that the nftflowoffloadinit function does not revoke the flowtable reference count added by nftuseinc when the nfctnetnsget call fails. As a result, references are leaked, preventing the...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.14 contains security vulnerabilities. These vulnerabilities stem from the possibility of the host controlling the length of the SGL segment, meaning that the SGL segment is too short. As a result, the nvmetpciipcfgetsglsegment function may read beyond its bounds,...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the RTC-32k clock provided by ac100rtcregisterclks, which does not handle device management. As a result, when the detection fails, it is not released properly. This may lead to reutilization after release and memory lea...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.8 contains security vulnerabilities. These vulnerabilities stem from the pvrmmumapsgl interface not correctly returning a failure to mapping operations. As a result, the pvrmmumap interface continues to execute instead of returning an error, which may lead to null point...

Gitea authorization issue vulnerability

Gitea 1.27.2 and earlier versions have an authorization issue. This issue arises from the lack of the individualPermsChecker middleware during the registration of seven API routes under /api/v1/users/username. This failure does not enforce visibility for target users, potentially allowing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.12 contains security vulnerabilities. These vulnerabilities arise when auditing a newly loaded policy. After a policy is published and the inode lock for the newly loaded directory is released, the policy may be concurrently deleted and reloaded. However, the auditing...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the BPF JIT compiler generating the addu instruction instead of the addiu instruction for the immediate numerical JMP JEQ/JNE instructions in MIPS32. As a result, the immediate value 1 is interpreted as the register $at...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.19 contains security vulnerabilities. These vulnerabilities stem from the fact that devcpudead does not refresh skbdefernodes. When the CPU is offline, the suspended skb’s remain active. If these skb contain pagepool fragments, pagepooldestroy will wait indefinitely whe...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.0 contains security vulnerabilities. These vulnerabilities stem from the fact that the adf4377clkregister function does not fully initialize the members of the clkinitdata and clkparentdata structures. Additionally, the init.parentnames and parentdata members are not...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.12 has a security vulnerability. This vulnerability arises from the virtual console failing to execute the conshouldupdate check when processing the ESC 8 path during DEC alignment tests. As a result, after changing the font size in the invisible virtual console, the...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.12 has a security vulnerability. This vulnerability stems from improper bounds checking of the length of RX packets in the catcrxdone function. The function does not consider the packet header offset and the remaining bytes, and accepts packets that are shorter than t...

Vanus-Labs Vanus authorization issue vulnerability

In the versions of Vanus-Labs’ Vanus from 0.8.0 to 0.9.0, there is an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks in the gateway, allowing any authenticated user to call methods such as Subscribe, Ack, and unregistered methods without proper...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.6 contains security vulnerabilities. These vulnerabilities arise from the nfcllcprecvdm function, which does not lock when handling DMNOBOUND/DMREJ, and does not unlink from the connectingsockets list. This results in list corruption and asynchronous reference counting...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.6 contains security vulnerabilities. These vulnerabilities stem from inconsistent sizes of the jack input/output descriptor arrays in the midi2 USB gadget. This could lead to out-of-bound access when configuring a large number of jacks using configfs...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.26 has a security vulnerability. This vulnerability stems from the KVM s390’s kvms390setirqstate function, which does not acquire the locks on kvm-srcu or slots when performing the Store status operation, potentially leading to race conditions...

Fastify @fastify/jwt session mechanism vulnerability

The Fastify @fastify/jwt versions prior to 10.2.5 have a session mechanism vulnerability. This vulnerability arises from the use of the top-level sign and verify methods, which replace rather than merge the global default configurations. As a result, global default protections such as token...

Linux Kernel Security Vulnerabilities

Security vulnerabilities exist in Linux kernels versions ranging from 6.12.26 to 6.12.113, 5.4.293 to 5.5, 5.10.237 to 5.11, 5.15.181 to 5.16, 6.1.136 to 6.2, 6.6.89 to 6.7, 6.14.5 to 6.15, and 6.15 itself. These vulnerabilities stem from the fact that when the GEVNTCOUNT value read by...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.16 contains security vulnerabilities. These vulnerabilities stem from improper handling of subpartitionscpus conflicts in the remotepartitionenable function. By replacing the error check with WARNONONCE, remote partitions can still be enabled on CPUs that are already...

Gitea security vulnerabilities

Gitea versions 28.1.0 and earlier have security vulnerabilities. These vulnerabilities stem from the fact that when parsing SSH certificates, the system searches for all stored public keys rather than just the main key. If a user trusts the certificate authority and accepts any main key, it may...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.11 contains security vulnerabilities. These vulnerabilities stem from the wifi cw1200 driver, where the TX path alignment fills the transmission length without reserving space for the padding, and the padding bytes are not cleared. This leads to an out-of-bounds read in...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.2 contains a security vulnerability. This vulnerability arises from the use of nfpnetipsecrx, which releases the XArray lock before acquiring the xfrmstate reference. Deleting this path may erase entries and discard the last state reference. As a result, RX increases it...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.16 contains security vulnerabilities. These vulnerabilities arise from modifying the bind file that is published via RCU while clearing expired local sources. When reading the path without locking, it is possible to observe torn IPv6 addresses, leading to address...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.15 contains a security vulnerability. This vulnerability arises from the failure of debugregisterstatic, which attempts to clear areas, activepages, and activeentries but does not update the area boundaries. As a result, when copying this area using view files or...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.2 contains a security vulnerability. This vulnerability arises from the premature release of backreferences when associating with non-transmission MBSSID configuration files. Subsequently, the same element pointers are still used to determine the working channel,...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.13 has a security vulnerability. This vulnerability stems from the threaded IRQ handler in the gp2ap020a00f driver, which queues data-work through the irqworkqueue. However, the freeirq function does not refresh the queued irwork, resulting in the work continuing to run...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.2 contains a security vulnerability. This vulnerability arises from the use of the spinunlockirq function in the blkgtrygetclosest function, which unlocks the queue lock without any conditions, potentially causing a deadlock when holding pool-lock...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions 6.6.15 to 6.7, 6.7.3 to 6.8, and 6.8 itself. These vulnerabilities stem from issues where, when the queue is removed from the host AP configuration and assigned to an intermediary device, the functions vfioapmdevResetQueue and...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.15 contains a security vulnerability. This vulnerability arises from the thunderbolt driver not restricting the length of XDomain response data. Malicious peers can set the length field to 63, causing the driver to process data in 48-byte chunks and exceeding the...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.10 contains a security vulnerability. This vulnerability arises from the tpm2getrandom function, which skips the 4-byte parameter size field when responding with the TPM2STSESSIONS tag. However, it still checks the response length using TPMinHEADERSIZE. As a result,...

Linux Kernel Security Vulnerabilities

The Linux kernel versions 6.12.111 to 6.12.112, 6.18.53 to 6.18.55, and 7.2 have security vulnerabilities. These vulnerabilities stem from the rfcommrecvframe function, which fails to properly check the frame length when EA=0 and ignores the return value of skbpull. As a result, a 3-byte rfcommhd...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities arise from a failure in the payload page pool allocation process. During this process, the cleanup path passes an incorrect pointer to pagepooldestroy, instead of destroying the header page pool. This can lead ...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.4 contains a security vulnerability. This vulnerability stems from the use of beacon IE in hidden group detection response entries. When merging scan entries after channel switching, the cfg80211updateassocbssentry function passes such entries to cfg80211updateknownbss...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.17 contains a security vulnerability. This vulnerability arises when mac80211 replaces a chanctx on the spot. In this case, the old chanctx is released prematurely while still pointing to it. As a result, subsequent operations such as canceling reservations and switchin...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.7 contains a security vulnerability. This vulnerability arises from improper handling of the flowtable pending status bit, resulting in a race condition between garbage collection and the hardware uninstallation process...

Mzanzi Open Source Solutions Schroedinger buffer error vulnerability

Mzanzi Open Source Solutions’ schroedinger 1.0.11 and earlier versions contain a buffer error vulnerability. This vulnerability arises from the lack of validation for wavelet filter indices or transformation depth values, which may lead to out-of-bounds reading of static quantization tables...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.16 contains a security vulnerability. This vulnerability arises from the fact that the function pkvmvcpuinitsve only limits the upper bound of svemaxvl provided by the host. It does not verify the length of SVE vectors before deriving the state size. As a result, an...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.13 contains a security vulnerability. This vulnerability arises from the port100 driver not verifying whether the frame length provided by the device exceeds the actual data length received, which may lead to out-of-bounds reading...