15285 matches found
ROS-20261112-73-0004
The LXC Incus container and virtual machine management system vulnerability is related to improper authorization checks when accessing storage bucket keys at endpoints. Exploitation of this vulnerability enables a remote attacker to obtain access keys and secret S3 keys for the default project,...
ROS-20261112-73-0042
The vulnerability in the j1939netdevnotify function within the net/can/j1939/main.c file of the Linux kernel is related to improper resource release. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
ROS-20261112-73-0006
The vulnerability in the LXC Incus container and virtual machine management client CLI is related to improper path neutralization when a file name is received from an HTTP Content-Disposition header during the export or copy of images from remote servers. Exploitation of this vulnerability allows...
ROS-20261112-73-0066
The vulnerability in the zerofsdecompresskickoff function within the fs/erofs/zdata.c file of the EROFS Enhanced ReadOnly File System kernel module in the Linux operating system is related to a stack-based buffer overflow. Exploitation of this vulnerability may allow an attacker to cause a denial...
ROS-20261112-73-0008
The LXC Incus container and virtual machine management system vulnerability stems from improper validation of access restrictions when the block.createoptions parameter is set during update, copy, or move operations involving user directories. Exploitation of this vulnerability enables a remote...
ROS-20261112-73-0137
The vulnerability in pdns-recursor is related to unrestricted resource allocation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...
ROS-20261112-73-0059
The vulnerability in kernel-lt is related to a lack of memory release after the effective service period. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
ROS-20261112-73-0139
The vulnerability in pdns-recursor is related to use-after-free memory usage. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20261112-73-0218
The LXC Incus container and virtual machine management system vulnerability stems from improper authorization checks in the user volume software interface, specifically when the source type parameter is omitted during a copy operation. Exploitation of this vulnerability enables a remote attacker ...
ROS-20261112-73-0055
The vulnerability in Glpi relates to improper validation of the path name for restricted access directories. Exploitation of this vulnerability may allow a remote attacker to gain unauthorized access to protected information...
ROS-20261112-73-0216
The vulnerability in the LXC Incus container and virtual machine management client CLI is related to improper handling of symbolic links during recursive file retrieval by the virtual machine agent. Exploitation of this vulnerability enables a remote attacker to send duplicate entries, thereby...
ROS-20261112-73-0108
The vulnerability in the smbinheritdacl and smbcheckpermdacl functions within the fs/smb/server/smbacl.c file of the SMB server module is related to reading memory outside the allocated buffer. Exploitation of this vulnerability may allow an attacker to gain access to protected information or cau...
ROS-20261112-73-0183
A vulnerability in Netty related to unrestricted resource allocation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...
ROS-20261112-73-0090
A vulnerability in kernel-lt related to dereferencing a null pointer. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
ROS-20261112-73-0072
A vulnerability in Glpi related to flaws in the deserialization mechanism. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...
ROS-20261112-73-0010
The LXC Incus container and virtual machine management system vulnerability stems from improper validation of access restrictions during the update operation for existing instances in a pull mode on cluster servers. Exploitation of this vulnerability enables a remote attacker to bypass security...
ROS-20261112-73-0058
A vulnerability in Glpi related to insecure privilege management. Exploitation of this vulnerability could allow an attacker to escalate their privileges...
ROS-20261112-73-0110
The vulnerability in the ath11kdprxmonmpdupop and ath11kdprxfullmonmpdupop functions within the drivers/net/wireless/ath/ath11k/dprx.c file of the Atheros/Qualcomm wireless driver for Linux is related to an infinite loop due to an unreachable condition. Exploitation of this vulnerability may allo...
ROS-20261112-73-0123
The vulnerability in the Microsoft Visual Studio Code source code editor is related to insufficient input validation. Exploitation of this vulnerability could allow an attacker to bypass existing security mechanisms...
ROS-20261112-73-0186
The vulnerability in the sqlarcompress and sqlaruncompress functions of the SQLAR extension for the SQLite database management system involves buffer overflow in memory. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
ROS-20261112-73-0203
The vulnerability in the TTX Logger component of Wireshark’s computer network traffic analyzer is related to a buffer overflow in dynamic memory. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
ROS-20261112-73-0211
The vips vulnerability is related to an out-of-bounds memory operation. Exploitation of this vulnerability may allow an attacker to disclose protected information...
ROS-20261112-73-0225
The iperf3 vulnerability is related to a buffer overflow in dynamic memory. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...
ROS-20261112-73-0057
The vulnerability in the extentwritepage function of the btrfs component in the Linux kernel is related to a potential memory leak. Exploitation of this vulnerability could allow an attacker to cause a denial of service...
ROS-20261112-73-0067
The vulnerability in Glpi is related to improper handling of web page structures. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...
ROS-20261112-73-0068
The vulnerability in the net/smc components of the Linux kernel stems from insufficient input validation. Exploitation of this vulnerability enables an attacker to cause a denial of service by sending specially crafted data containing parameters such as v2extoffset, eidcnt, and ismgidcnt...
ROS-20261112-73-0085
The vulnerability in the f2fsmergepagebio function within the Linux kernel is related to memory usage errors that occur after memory is freed. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
ROS-20261112-73-0089
The vulnerability in the rtwcoredeinit function within the drivers/net/wireless/realtek/rtw88/main.c file of the Realtek wireless driver for the Linux kernel is related to improper memory deallocation a “memory leak”. Exploitation of this vulnerability may allow an attacker to compromise the...
ROS-20261112-73-0175
The vulnerability in the HAProxyMessage and HAProxyMessageEncoder classes of the Netty-based framework for developing network applications, servers, and clients is related to improper handling of CRLF sequences. Exploitation of this vulnerability may allow an attacker to manipulate data...
ROS-20261112-73-0049
A vulnerability in Glpi related to improper handling of SQL query structures. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...
ROS-20261112-73-0195
The vulnerability in openssl3 is related to buffer overflow in memory. Exploitation of this vulnerability may allow an attacker to execute arbitrary code...
ROS-20261112-73-0120
The kernel vulnerability in the Linux operating system is related to improper use of memory after it has been freed. Exploitation of this vulnerability enables an attacker to gain access to sensitive data, compromise its integrity, and cause a denial of service...
ROS-20261112-73-0156
A vulnerability in nvidia-drivers related to an integer overflow. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
ROS-20261112-73-0162
A vulnerability in nvidia-drivers related to use-after-free memory. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...
ROS-20261112-73-0172
The vulnerability in the Go programming language’s net/http, net/http/internal/http2, and golang.org/x/net/http2 packages is related to resource duplication. Exploitation of this vulnerability may allow a remote attacker to bypass existing security mechanisms...
ROS-20261112-73-0075
The vulnerability in kernel-lt is related to insufficient resource control during its existence. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
ROS-20261112-73-0149
A vulnerability in nvidia-drivers related to the lack of protection for sensitive data. Exploitation of this vulnerability may allow a remote attacker to gain unauthorized access to protected information...
ROS-20261112-73-0074
The vulnerability in glpi-plugin-fields is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...
ROS-20261112-73-0019
The vulnerability in the kernel component lib/rhashtable.c of the Linux operating system is related to dereferencing a pointer with an expired lifetime. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
ROS-20261112-73-0050
A vulnerability in Glpi related to flaws in the authorization process. Exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to protected information...
ROS-20261112-73-0214
The vulnerability in LXC Incus’s built-in S3 server for container and virtual machine management is related to improper validation of request signatures. This allows unsigned HTTP headers with the x-amz- prefix to be added when using pre-signed URLs for data uploads. Exploitation of this...
ROS-20261112-73-0079
The vulnerability in the hdacomponentmanagerinit function within the sound subsystem of the Linux kernel is related to dereferencing pointers. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
ROS-20261112-73-0201
The vulnerability in Wireshark is related to a stack buffer overflow. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...
ROS-20261112-73-0118
The vulnerability in the hclgeptpsettxinfo function within the drivers/net/ethernet/hisilicon/hns3/hns3pf/hclgeptp.c file of the Linux kernel-based Ethernet adapter driver is related to dereferencing pointers. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
ROS-20261112-73-0041
The vulnerability in the stackchkfail function of the Linux kernel is related to a stack buffer overflow. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
ROS-20261112-73-0046
A vulnerability in Glpi related to flaws in the authorization process. Exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to protected information...
ROS-20261112-73-0002
The LXC Incus container and virtual machine management system vulnerability is related to improper handling of symbolic links when processing migration streams for containers and volumes. Exploitation of this vulnerability enables a remote attacker to perform arbitrary file writes on the host...
ROS-20261112-73-0131
A vulnerability in Codium related to access control flaws. Exploiting this vulnerability could allow an attacker to escalate their privileges...
ROS-20261112-73-0168
The vulnerability in varnish is related to flaws in handling HTTP requests. Exploitation of this vulnerability allows a remote attacker to send hidden HTTP requests an http request smuggling attack...