Vuldb Updates

It seems this issue is a false-positive. Please confirm the sources provided and consider disregarding this entry.

A vulnerability was found in UTT 进取 520W 1.7.7-180627 and classified as critical. This issue affects the function strcpy of the file /goform/ConfigExceptAli. The manipulation results in buffer overflow. This vulnerability is known as CVE-2026-1140. It is possible to launch the attack remotely. Furthermore, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in xHTTP 72f812d and classified as critical. The affected element is the function close_connection of the file xhttp.c of the component HTTP Request Method Handler. Such manipulation leads to double free. This vulnerability is referenced as CVE-2023-38434. The attack needs to be initiated within the local network. No exploit is available.

A vulnerability labeled as problematic has been found in Linux Kernel up to 6.2.11. This vulnerability affects the function set_con2fb_map of the file drivers/video/fbdev/core/fbcon.c of the component vc Handler. Such manipulation of the argument fbcon_registered_fb/fbcon_display leads to privilege escalation. This vulnerability is traded as CVE-2023-38409. Access to the local network is required for this attack to succeed. There is no exploit available. The affected component should be upgraded.

A vulnerability has been found in Netgear R6900P 1.3.3.154 and classified as critical. Impacted is an unknown function of the file ia_ap_setting.cgi. The manipulation of the argument wla_ssid/wlg_ssid leads to buffer overflow. This vulnerability is documented as CVE-2023-38412. The attack requires being on the local network. There is not any exploit available.

A vulnerability was found in Linux Kernel up to 6.3.7. It has been classified as problematic. Affected by this issue is the function deassemble_neg_contexts of the file fs/smb/server/smb2pdu.c of the component ksmbd. The manipulation leads to out-of-bounds read. This vulnerability is listed as CVE-2023-38427. The attack must be carried out from within the local network. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability, which was classified as problematic, was found in Crestron 3-Series Control Systems. This issue affects some unknown processing of the component BACnet Packet Handler. The manipulation results in denial of service. This vulnerability was named CVE-2023-38405. The attack needs to be approached within the local network. There is no available exploit. You should upgrade the affected component.

A vulnerability, which was classified as critical, was found in Veritas InfoScale Operations Manager 7.4.2.800/8.0.0. This impacts an unknown function of the component XPRTLD Web Application. Such manipulation leads to unrestricted upload. This vulnerability is referenced as CVE-2023-38404. It is possible to launch the attack remotely. No exploit is available. You should upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.53/6.10.12/6.11.1 and classified as critical. Impacted is an unknown function of the file vdec_h264_req_multi_if.c. Executing a manipulation can lead to null pointer dereference. This vulnerability is registered as CVE-2024-47754. The attack requires access to the local network. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.1.112/6.6.53/6.10.12/6.11.1. It has been declared as critical. Affected by this issue is the function kirin_pcie_parse_port of the component PCI. Such manipulation leads to buffer overflow. This vulnerability is traded as CVE-2024-47751. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.6.53/6.10.12/6.11.1. This vulnerability affects unknown code of the file vdec_h264_req_if.c of the component vcodec. Such manipulation leads to null pointer dereference. This vulnerability is listed as CVE-2024-47752. The attack must be carried out from within the local network. There is no available exploit. You should upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.6.53/6.10.12/6.11.1 and classified as critical. This issue affects some unknown processing of the file vdec_vp8_req_if.c. Performing a manipulation results in null pointer dereference. This vulnerability is cataloged as CVE-2024-47753. The attack must originate from the local network. There is no exploit available. The affected component should be upgraded.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.1.112/6.6.53/6.10.12/6.11.1. This affects the function ib_unregister_device of the component RDMA. This manipulation causes use after free. This vulnerability is tracked as CVE-2024-47750. The attack is only possible within the local network. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 6.11.1. Affected by this issue is the function lookup_atid. The manipulation results in null pointer dereference. This vulnerability is identified as CVE-2024-47749. The attack can only be performed from the local network. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability classified as critical has been found in Linux Kernel up to 6.11.1. Affected by this vulnerability is the function irq_bypass_unregister_producer of the component vhost_vdpa. The manipulation leads to use after free. This vulnerability is referenced as CVE-2024-47748. The attack needs to be initiated within the local network. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability described as problematic has been identified in Linux Kernel up to 6.10.12/6.11.1. Affected is an unknown function of the component fuse. Executing a manipulation can lead to improper locking. The identification of this vulnerability is CVE-2024-47746. The attack needs to be done within the local network. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability was found in Linux Kernel up to 6.6.53/6.10.12/6.11.1. It has been declared as problematic. This impacts the function security_mmap_file. The manipulation results in insufficient verification of data authenticity. This vulnerability is known as CVE-2024-47745. Access to the local network is required for this attack. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.11.1. It has been classified as critical. Affected by this vulnerability is the function ether3_probe. This manipulation causes use after free. This vulnerability appears as CVE-2024-47747. The attacker needs to be present on the local network. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.6.53/6.10.12/6.11.1. This issue affects the function __kvmclock_cpufreq_notifier. This manipulation causes deadlock. This vulnerability is registered as CVE-2024-47744. The attack requires access to the local network. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in RIGOL SO5000 Digital Oscilloscope 00.01.03.00.03. This issue affects some unknown processing of the file changepwd.cgi of the component Web Interface. Performing a manipulation of the argument pass1 results in os command injection. This vulnerability is cataloged as CVE-2023-38378. It is possible to initiate the attack remotely. There is no exploit available.