Gitea authorization issue vulnerability

Gitea 1.27.2 and earlier versions have an authorization issue. This issue arises from the lack of the individualPermsChecker middleware during the registration of seven API routes under /api/v1/users/username. This failure does not enforce visibility for target users, potentially allowing...

Gitea authorization issue vulnerability

Gitea versions 28.1.0 and earlier have security vulnerabilities. These vulnerabilities stem from the lack of verification during OpenID association callbacks to ensure that only logged-in users initiate associations. Gitea allows for the acceptance of unrequested OpenID 2.0 assertions, which coul...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from the fbnic driver, which selects NAPI vectors for Rx queues using a modulo operation in the fbnictxrx.c file. When an independent Tx vector exists, the selection incorrectly points to the Tx NAPI vecto...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.35 has a security vulnerability. This vulnerability arises from hfscclassify not performing hierarchical checks on filters with flowid. Additionally, when hfscadjustlevels increases the class level, it does not revalidate the bindings. As a result, classification...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.16 contains a security vulnerability. This vulnerability stems from the wacomwacpenserialenforce function, which calculates and passes an invalid offset to hidfieldextract, resulting in out-of-bounds memory access and potentially leading to information leakage...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.8 contains security vulnerabilities. These vulnerabilities arise from the fact that the link between the VMA resources is not released before destroying the page table in xevmcloseandput. As a result, concurrent threads may deallocate shared buffer objects and then call...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.0 contains security vulnerabilities. These vulnerabilities arise from improper handling of cursors and pointers when xfs restores iunlink buckets. After releasing previp, it is not set to null, and the prevagino setting is incorrect. This may lead to reuse after release...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.17 contains a security vulnerability. This vulnerability stems from the gpio-zynq driver failing to release runtime PM references during an erroneous path request, resulting in reference leaks. As a result, the controller cannot be suspended when not running, and the...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.15 contains security vulnerabilities. These vulnerabilities stem from the Wake-on-LAN branch of the bcmgenetnetifstop and bcmgenetsuspend functions, which first disable the Tx queue and then stop the Tx NAPI. As a result, sending operations can reach the circular buffer...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions 6.1.54 and earlier, 6.5.4 and earlier than 6.6, as well as 6.6 itself. These vulnerabilities stem from the virtiogpufencealloc function, which returns NULL under memory pressure. As a result, the caller does not check this value and...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.0 contains a security vulnerability. This vulnerability stems from KVM arm64’s improper handling of user-space inputs when searching for unknown VM ioctl operations in protected mode. This improper handling triggers a WARN message and causes the pKVM host to crash...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.15 contains a security vulnerability. This vulnerability stems from a race condition in the handling of timestamp transmissions: wx-ptptxskb is shared among the transmission path, PTP auxiliary work threads, and the cleanup path. The cleanup path may release skb objects...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.19 contains security vulnerabilities. These vulnerabilities stem from the UFS core, which silently queues internal commands during error recovery. As a result, internal commands cannot be scheduled, leading to irreversible circular wait deadlocks, which may cause...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the fact that hcisock does not verify the length of events before filtering them. When reading event codes and command operation codes, it does not check whether the skb is not empty or the length of the event. This may...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.16 contains a security vulnerability. This vulnerability stems from the ISO15693 inventory helper function, which removes the two-byte prefix without checking whether it exists. After accepting a single-byte remaining data, it reads data1 as DSFID, which may lead to...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in the Linux kernel versions from 6.12.16 to 6.13, from 6.13.4 to 6.14, from 5.15.179 to 5.16, from 6.1.130 to 6.2, from 6.6.81 to 6.7, from 5.10.235 to 5.11, and in 6.14. The vulnerability stems from the fact that the dstdevoverhead function does not reserve...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.29 has a security vulnerability. This vulnerability arises from the fact that tpdcons does not handle out-of-bounds values such as 0xffff properly, resulting in an infinite loop and a soft lock...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the ineffective use of condresched in the PREEMPTION kernel during offline cgwb cleanup. This failure does not report the quiescent state of Tasks-RCU, which may lead to prolonged blocking of synchronizercutasks and...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from nouveauuvmmsm incorrectly treating ttmresource as nouveaumem when BO is at TTMPLSYSTEM. This leads to out-of-bounds read accesses and reuse of resources after release...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the GUE REMSUM option not verifying the order of the checksum’s start value and the field offset. When the offset is less than the start value, underflow occurs, potentially leading to forwarded packets being written...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.6 contains a security vulnerability. This vulnerability stems from an unsigned overflow during the subtraction of skbheadlen and offset in the skbpointeriflinear function. This leads to a boundary-checking error, resulting in the generation of arbitrary pointers. This...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.11 contains a security vulnerability. This vulnerability arises from the fact that after the nouveaucliinit function fails, nouveauclifini is called to clean up the client. Subsequently, the cleanup path for nouveaudrmopen calls nouveauclifini again. However, after...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability that stems from the lack of strict validation for the length of the SEG6ATTRDST attribute. This allows shorter payloads, resulting in out-of-bound reads of 16-byte segments of uninitialized kernel heap memory. This vulnerability can be exploited throu...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.17 contains security vulnerabilities. These vulnerabilities stem from the fact that emtextdump does not zero the stack when allocating a struct tcfemtext; the strscpy function writes the algorithm name and NUL terminator, but the remaining bytes are not initialized...

WSO2 Enterprise Integrator command injection vulnerability

WSO2 Enterprise Integrator has a command injection vulnerability. This vulnerability stems from improper input validation in the Management Console’s handling of JDBC user storage configurations. It may allow attackers to execute arbitrary code on affected servers with WSO2 product privileges...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.6 contains security vulnerabilities. These vulnerabilities stem from the PCI dynamic OF helper function, which dereferences pdev-subordinate without checking the subordinate bus. This may lead to null pointer dereferencing and early startup suspension...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions from 4.14.86 to 4.15, as well as versions from 4.19.7 to 4.20, and 4.20 itself. These vulnerabilities arise when the tpacketsnd function sends skb fragments to ring buffer slots, causing skborphan to call skb-destructor before the skb i...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.8 contains security vulnerabilities. These vulnerabilities stem from the pvrmmumapsgl interface not correctly returning a failure to mapping operations. As a result, the pvrmmumap interface continues to execute instead of returning an error, which may lead to null point...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.36 contains a security vulnerability. This vulnerability arises from the icdhcpinitoptions function, which appends the hostname, vendor-class, and client-ID options to a fixed 312-byte bootppkt.exten buffer. No boundary checks are performed for writing the hostname an...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.0 contains a security vulnerability. This vulnerability stems from an improper synchronization mechanism during the kprobes optimizer’s refresh process. When writing 0 to /proc/sys/debug/kprobes-optimization, if the kprobe is in jump optimization mode, it will not retur...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.1 contains a security vulnerability. This vulnerability stems from the fact that in the file drivers/net/dsa/mt7530-mdio.c, the function mt7530remove unconditionally disables regulator. However, the core and io power pointers for MT7531 and MT7621 remain NULL. As a...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.13 contains security vulnerabilities. These vulnerabilities arise from the s390/uv component, which allows only 85 items to be stored in the uvsecretlist array per page when there are more than 85 secrets in the system. The findsecretinpage function does not iterate ove...

Ravi Teja Online-Examination-System Authorization Issues Vulnerability

Ravi Teja Online-Examination-System e6208e630b14657999bbfe4c9912302d2a1e2449 and previous versions have an authorization issue vulnerability. This vulnerability stems from the lack of authentication for the isAdmin function in the admin/admin.php file, which may allow remote attackers to bypass...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from kprobes failing to skip disabled probes when checking optkprobe overlaps. As a result, INT3 overwrites the last byte of the jump offset, potentially causing the program to be executed at an incorrect address...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.4 contains a security vulnerability. This vulnerability arises from Bluetooth btintel not correctly verifying the length of DDC records. As a result, the length value may be looped back, leading to out-of-bounds access...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions from 6.12.81 to 6.12.113, from 6.18.22 to 6.18.56, from 6.1.168 to 6.2, from 6.6.134 to 6.7, from 6.19.12 to 6.20, and 7.0. The vulnerability stems from incomplete detection of IPv6 extension headers in tunneled data packets. The system...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from a flaw in the rustbinder thread, where delayed work items are not canceled when the thread exits, resulting in these work items not being cleaned up...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.19 contains security vulnerabilities. These vulnerabilities stem from the fact that devcpudead does not refresh skbdefernodes. When the CPU is offline, the suspended skb’s remain active. If these skb contain pagepool fragments, pagepooldestroy will wait indefinitely whe...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.17 contains security vulnerabilities. These vulnerabilities stem from trf7970astartup failing to undo the device power-on state when reading/writing from the RX gain register. As a result, VIN enable references become unbalanced during startup, and the system’s recovery...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.1 contains a security vulnerability. This vulnerability arises from fprobefgraphentry, which does not clear uninitialized reserved shadow stack spaces. As a result, fprobereturn misinterprets unused tail sections as previously called headers, potentially causing exit...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.2 contains a security vulnerability. This vulnerability arises from the use of the spinunlockirq function in the blkgtrygetclosest function, which unlocks the queue lock without any conditions, potentially causing a deadlock when holding pool-lock...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.21 has a security vulnerability. This vulnerability stems from a race condition that occurs when the USB dynamic ID driver is. The dynamic ID is released before the driver is canceled and the newid attribute is removed. This may lead to a race condition that causes th...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.30 has a security vulnerability. This vulnerability stems from a race condition in the USB serial driver when the port is removed. The processing program may access data from the port driver that has been released, leading to reutilization of the released port...

Gitea security vulnerabilities

Gitea versions 28.1.0 and earlier have security vulnerabilities. These vulnerabilities stem from the fact that when parsing SSH certificates, the system searches for all stored public keys rather than just the main key. If a user trusts the certificate authority and accepts any main key, it may...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.6 contains security vulnerabilities. These vulnerabilities arise from the lack of initializing the .num member before accessing the.hws array. This can lead to out-of-bounds array indexing or trigger traps...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.1 contains security vulnerabilities. These vulnerabilities arise from an error in the processing of the bmp280 sensor’s sampling frequency; the number of flattened elements used as the row count of a two-dimensional array was incorrectly calculated, leading to...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.13 contains security vulnerabilities. This vulnerability stems from the lack of ensuring that max is at least equal to skbheadlenskb. When parsing IPv6 extension headers, unsigned subtraction causes underflow and converts to a negative value, resulting in skbcopybits...

Linux Kernel Security Vulnerabilities

The Linux kernel versions from 6.17.3 to 6.18 and version 6.18 have security vulnerabilities. These vulnerabilities stem from an error in the macballoc function, where the Tx and Rx buffers that have been allocated are not promptly stored in bp-queues0. As a result, during error handling, these...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the fact that the check for whether worker-currentpwq is empty during the flush dependency check was not performed properly. This could lead to null pointer dereferencing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.15 contains a security vulnerability. This vulnerability arises from the failure of debugregisterstatic, which attempts to clear areas, activepages, and activeentries but does not update the area boundaries. As a result, when copying this area using view files or...