WSO2 Enterprise Integrator command injection vulnerability

WSO2 Enterprise Integrator has a command injection vulnerability. This vulnerability stems from improper input validation in the Management Console’s handling of JDBC user storage configurations. It may allow attackers to execute arbitrary code on affected servers with WSO2 product privileges...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.19 contains security vulnerabilities. These vulnerabilities stem from improper handling of pmruntime errors during the ASoC SDCA function detection process. As a result, the correct path for referencing PM during balanced runtime is missing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.13 contains a security vulnerability. This vulnerability arises from a race condition between perfeventexittask and perfpendingtask during the beginnewexec operation. When the task does not set the PFEXITING flag, perfsigtrap continues to execute and triggers WARNONONCE...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from a flaw in the rustbinder thread, where delayed work items are not canceled when the thread exits, resulting in these work items not being cleaned up...

Grigory Chudov: A bug related to numerical errors

Grigory Chudov’s libtta versions 2.3 and earlier have a numerical error vulnerability. This vulnerability stems from the ttadecoderinitgetinfo function not verifying header fields properly. Integer overflow leads to a stack buffer overflow in 32-bit builds. Attackers can exploit this vulnerabilit...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.5 contains a security vulnerability. This vulnerability stems from the Cadence NAND interrupt handling program not initializing the IRQ lock and the completion object before registering the IRQ. This may lead to suspended interrupt accesses accessing an uninitialized...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.7 contains a security vulnerability. This vulnerability arises from the fact that ieee802118023xmit does not set info-band from the channel context on non-MLD interfaces. As a result, ieee80211gettxrates uses the wrong frequency band for these frames...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions 5.10.50 through 5.11, 5.12.17 through 5.13, 5.13.2 through 5.14, and 5.14 itself. These vulnerabilities stem from SMB clients, which perform the FALLOCFLKEEPSIZE fallocate simulation in smb3simplefallocaterange. During this process, dat...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.1 contains security vulnerabilities. These vulnerabilities arise from the lack of holding of hcidevlock during the enhanced SCO setup process. The CVSD capability check and the operation of findnextescoparam that dereferences conn-parent and releases the parent object o...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.10 contains security vulnerabilities. These vulnerabilities stem from the vmgenid driver, which does not set the driverdata before registering the notification handler. When an interrupt occurs, the handler dereferes a null pointer, which may lead to kernel crashes...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.34 contains security vulnerabilities. These vulnerabilities arise from the use of device-type reserved link layer header space in llcallocframe. Insufficient reservation for VLAN and other stacked Ethernet devices leads to a potential underflow of the skb header space...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.19 has a security vulnerability. This vulnerability stems from improper locking and serialization in Bluetooth SMP remote OOB data access. The buildpairingcmd function searches for and copies remote OOB data without holding the hdev-lock. This may lead to post-release...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.0 contains a security vulnerability, which stems from the lack of range checks on doprocintconvmsjiffiesminmax...

Automatic1111 Stable Diffusion web UI resource management error vulnerability

Automatic1111 Stable Diffusion’s web UI versions prior to 1.10.1 have a resource management vulnerability. This vulnerability stems from an improper handling of the header length field parameter in the readmetadatafromsafetensors function within the Metadata Extraction component’s file...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.16 contains a security vulnerability. This vulnerability stems from the fact that the st21nfcahcii2crepack function does not verify the size of the received frames. When removing byte padding from deformed frames, data outside the current skb length may be read, resulti...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.15 contains a security vulnerability. This vulnerability stems from the ofoverlayfdtapply function in of/overlay, which checks the return value of idralloc before execution. If this function fails, a negative ID passes the check, and uninitialized ovcs-ovcslist is...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.14 contains security vulnerabilities. These vulnerabilities stem from the possibility of the host controlling the length of the SGL segment, meaning that the SGL segment is too short. As a result, the nvmetpciipcfgetsglsegment function may read beyond its bounds,...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the RTC-32k clock provided by ac100rtcregisterclks, which does not handle device management. As a result, when the detection fails, it is not released properly. This may lead to reutilization after release and memory lea...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.8 contains security vulnerabilities. These vulnerabilities stem from the pvrmmumapsgl interface not correctly returning a failure to mapping operations. As a result, the pvrmmumap interface continues to execute instead of returning an error, which may lead to null point...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the BPF JIT compiler generating the addu instruction instead of the addiu instruction for the immediate numerical JMP JEQ/JNE instructions in MIPS32. As a result, the immediate value 1 is interpreted as the register $at...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.19 contains security vulnerabilities. These vulnerabilities stem from the fact that devcpudead does not refresh skbdefernodes. When the CPU is offline, the suspended skb’s remain active. If these skb contain pagepool fragments, pagepooldestroy will wait indefinitely whe...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.0 contains security vulnerabilities. These vulnerabilities stem from the fact that the adf4377clkregister function does not fully initialize the members of the clkinitdata and clkparentdata structures. Additionally, the init.parentnames and parentdata members are not...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.12 has a security vulnerability. This vulnerability stems from improper bounds checking of the length of RX packets in the catcrxdone function. The function does not consider the packet header offset and the remaining bytes, and accepts packets that are shorter than t...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.26 has a security vulnerability. This vulnerability stems from the KVM s390’s kvms390setirqstate function, which does not acquire the locks on kvm-srcu or slots when performing the Store status operation, potentially leading to race conditions...

Fastify @fastify/jwt session mechanism vulnerability

The Fastify @fastify/jwt versions prior to 10.2.5 have a session mechanism vulnerability. This vulnerability arises from the use of the top-level sign and verify methods, which replace rather than merge the global default configurations. As a result, global default protections such as token...

Linux Kernel Security Vulnerabilities

Security vulnerabilities exist in Linux kernels versions ranging from 6.12.26 to 6.12.113, 5.4.293 to 5.5, 5.10.237 to 5.11, 5.15.181 to 5.16, 6.1.136 to 6.2, 6.6.89 to 6.7, 6.14.5 to 6.15, and 6.15 itself. These vulnerabilities stem from the fact that when the GEVNTCOUNT value read by...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.11 contains security vulnerabilities. These vulnerabilities stem from the wifi cw1200 driver, where the TX path alignment fills the transmission length without reserving space for the padding, and the padding bytes are not cleared. This leads to an out-of-bounds read in...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.16 contains security vulnerabilities. These vulnerabilities arise from modifying the bind file that is published via RCU while clearing expired local sources. When reading the path without locking, it is possible to observe torn IPv6 addresses, leading to address...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.2 contains a security vulnerability. This vulnerability arises from the premature release of backreferences when associating with non-transmission MBSSID configuration files. Subsequently, the same element pointers are still used to determine the working channel,...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.2 contains a security vulnerability. This vulnerability arises from the use of the spinunlockirq function in the blkgtrygetclosest function, which unlocks the queue lock without any conditions, potentially causing a deadlock when holding pool-lock...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions 6.6.15 to 6.7, 6.7.3 to 6.8, and 6.8 itself. These vulnerabilities stem from issues where, when the queue is removed from the host AP configuration and assigned to an intermediary device, the functions vfioapmdevResetQueue and...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.15 contains a security vulnerability. This vulnerability arises from the thunderbolt driver not restricting the length of XDomain response data. Malicious peers can set the length field to 63, causing the driver to process data in 48-byte chunks and exceeding the...

Linux Kernel Security Vulnerabilities

The Linux kernel versions 6.12.111 to 6.12.112, 6.18.53 to 6.18.55, and 7.2 have security vulnerabilities. These vulnerabilities stem from the rfcommrecvframe function, which fails to properly check the frame length when EA=0 and ignores the return value of skbpull. As a result, a 3-byte rfcommhd...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities arise from a failure in the payload page pool allocation process. During this process, the cleanup path passes an incorrect pointer to pagepooldestroy, instead of destroying the header page pool. This can lead ...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.4 contains a security vulnerability. This vulnerability stems from the use of beacon IE in hidden group detection response entries. When merging scan entries after channel switching, the cfg80211updateassocbssentry function passes such entries to cfg80211updateknownbss...

Mzanzi Open Source Solutions Schroedinger buffer error vulnerability

Mzanzi Open Source Solutions’ schroedinger 1.0.11 and earlier versions contain a buffer error vulnerability. This vulnerability arises from the lack of validation for wavelet filter indices or transformation depth values, which may lead to out-of-bounds reading of static quantization tables...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.16 contains a security vulnerability. This vulnerability arises from the fact that the function pkvmvcpuinitsve only limits the upper bound of svemaxvl provided by the host. It does not verify the length of SVE vectors before deriving the state size. As a result, an...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.13 contains a security vulnerability. This vulnerability arises from the port100 driver not verifying whether the frame length provided by the device exceeds the actual data length received, which may lead to out-of-bounds reading...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.10 contains a security vulnerability. This vulnerability stems from the meshpathadd function in net/mac80211/meshpathtbl.c, which does not release the reserved mesh path quotas when path allocation or insertion fails. This can lead to repeated failures or repeated...

Ravi Teja Online-Examination-System Input Verification Vulnerability

Ravi Teja Online-Examination-System has a security vulnerability. This vulnerability stems from the incorrect handling of the topicid parameter in the Exam::startExam function within the exam.php file in the Exam Module component. This could lead to SQL injection attacks, and attackers could...

ProjectSend authorization issue vulnerability

The ProjectSend version 2.0.0 to 2.7.0 had an authorization issue vulnerability. This vulnerability stemmed from improper authorization. Users who possess restricted API tokens were able to change the token owner credentials via the PATCH /api/v1/users/user endpoint. Only tokens with the...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.5 contains a security vulnerability. This vulnerability arises from calling inetcsklistenstop within the BPF context without skipping condresched. This may lead to the invocation of sleep functions in an invalid context, thereby triggering debugging checks...

Grigory Chudov: A bug related to numerical errors

Grigory Chudov’s libtta versions 2.3 and earlier have a numerical error vulnerability. This vulnerability stems from the fact that the ttadecoderinitgetinfo function does not validate the zero sampling rate. An attacker can create a .tta file with a recalculated header CRC32, triggering SIGFPE an...

Vita3K path traversal vulnerability

Vita3K has a path traversal vulnerability. This vulnerability stems from a path traversal Zip Slip issue in the installarchivecontent function. Attackers can write files outside of the installation directory using the “..” path segment or absolute paths within a specially crafted.vpk compressed...

Beau Gunderson ip-address resource management error vulnerability

Beau Gunderson’s IP-address version prior to 10.7.4 contains a resource management error vulnerability. This vulnerability arises from functions that accept inputs containing a large number of '%' characters and invoke the Address6 constructor function. This leads to a quadratic complexity, causi...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.12 contains security vulnerabilities. These vulnerabilities stem from the netfsreadgaps function, which does not clear the read gaps surrounding the streaming write to the dirty area. As a result, short reads on the server side or EOF responses may retain outdatedfolio...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.7 contains security vulnerabilities. These vulnerabilities stem from a driver that allocates memory for buffer paths based on samples. When the regmap operation in kx022afifoenable fails, the allocated memory is not released, and the hardware configuration and status...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.16 contains a security vulnerability. This vulnerability arises from unprotected read operations on the debugfs file system. In this case, the serialnumber file operation does not invoke the debugfsfileget function. As a result, the debugfsremoverecursive function does...

Gitea resource management error vulnerability

The Gitea versions from 1.22.0 to 28.1.0 have a resource management vulnerability. This vulnerability stems from the Gitea Actions artifact v4 Twirp processor, which does not limit the size of the entire request body when reading it into memory. Users who have permission to run workflows and acce...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.2 contains security vulnerabilities. These vulnerabilities stem from the use of NULL pmuctx in the perfpmuschedtask function, which may lead to undefined behavior due to null pointer dereferencing in the kernel...