16368 matches found
PT-2025-39874
Name of the Vulnerable Software and Affected Versions Medical Informatics Engineering Enterprise Health versions prior to 2025-03-14 Description A CSV injection issue exists that permits a remote, authenticated attacker to inject macros into downloadable CSV files. The issue was resolved on March...
IBM License Metric Tool Access Control Vulnerability
The IBM License Metric Tool is a free tool from International Business Machines IBM that helps IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs. An Access Control Error vulnerability exists in IBM License Metric Tool...
llvm:clang-fuzzer: Use-of-uninitialized-value in clang::Parser::ParseOptionalCXXScopeSpecifier
Detailed Report: https://oss-fuzz.com/testcase?key=5126446348828672 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clang::Parser::ParseOptionalCXXScopeSpecifier...
matio:matio_fuzzer: Use-of-uninitialized-value in H5T__bit_find
Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=4640034911485952 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzermsanmatio Platform Id: linux Crash Type: Use-of-uninitialized-val...
Linux kernel fair dequeue entities DoS
The vulnerability of the dequeueentities function in the kernel/sched/fair.c component of the Linux operating system is related to an unvalidated return value. Exploiting this vulnerability could allow a attacker to cause a service failure...
Linux block/fops.c Heap Buffer Overflow DoS
The vulnerability of the blkdevreaditer function in the block/fops.c component of the Linux operating system’s kernel is related to an unvalidated return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the npcm-video.c component in the Linux operating system’s kernel is related to an unvalidated return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
virtiofs DoS
The vulnerability of the virtiofs component in Linux operating systems is related to improper checking of the returned value from the function. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux x86/mm Kernel DoS
The vulnerability of the x86/mm kernel component of the Linux operating system is related to an unvalidated return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the inftlcore.c component in the Linux operating system’s kernel is related to an unvalidated return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux Tegra-se-aes.c Tegra-se-hash.c DoS
The vulnerability of the tegra-se-aes.c and tegra-se-hash.c components of the Linux operating system’s kernel is related to an unvalidated return value. Exploiting this vulnerability could allow a attacker to cause a service failure...
quickjs:fuzz_compile: Use-of-uninitialized-value in JS_DefineProperty
Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=4551913271263232 Project: quickjs Fuzzing Engine: libFuzzer Fuzz Target: fuzzcompile Job Type: libfuzzermsanquickjs Platform Id: linux Crash Type:...
CVE-2025-60018
glib-networking's OpenSSL backend fails to properly check the return value of a call to BIOwrite, resulting in an out of bounds read...
CVE-2025-60019
glib-networking's OpenSSL backend fails to properly check the return value of memory allocation routines. An out of memory condition could potentially result in writing to an invalid memory location...
CVE-2025-60018
glib-networking's OpenSSL backend fails to properly check the return value of a call to BIOwrite, resulting in an out of bounds read...
CVE-2025-60018
glib-networking's OpenSSL backend fails to properly check the return value of a call to BIOwrite, resulting in an out of bounds read...
imagemagick:encoder_ptif_fuzzer: Use-of-uninitialized-value in IdentifyImageGray
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5593893812109312 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderptiffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...
CVE-2025-57638
Buffer overflow vulnerability in Tenda AC9 1.0 via the user supplied sys.vendor configuration value...
Configure a Proper Value for LoginGraceTime
LoginGraceTime is used to limit the login time of a user. If a user does not complete the login within the time specified by LoginGraceTime, the connection is automatically disconnected. You are advised to set this field to a value less than or equal to 60, in seconds. If this field is set to a...
Configure a Proper Value for MaxAuthTries
MaxAuthTries indicates the maximum number of user authentication failures allowed in a single connection. If the number of user authentication failures exceeds the value, the connection is automatically disconnected. You are advised to set this field to a value less than or equal to 3. If this...