814 matches found
EUVD-2025-35632
binaryvecio access memory out-of-bounds in binaryreadtoref and binarywritefromref...
binary_vec_io access memory out-of-bounds in binary_read_to_ref and binary_write_from_ref
Safe functions accept a single &T or &mut T but multiply by n to create slices extending beyond allocated memory when n 1. These functions use fromrawparts to create slices larger than the underlying allocation, violating memory safety. The binaryvecio repository is archived and unmaintained...
Out-of-bounds memory access in binary_read_to_ref and binary_write_from_ref
Safe functions accept a single &T or &mut T but multiply by n to create slices extending beyond allocated memory when n 1. These functions use fromrawparts to create slices larger than the underlying allocation, violating memory safety. The binaryvecio repository is archived and unmaintained...
CVE-2022-50553
In the Linux kernel, the following vulnerability has been resolved: tracing/hist: Fix out-of-bound write on 'actiondata.varrefidx' When generate a synthetic event with many params and then create a trace action for it 1, kernel panic happened 2. It is because that in traceactioncreate...
CVE-2022-50553 tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx'
In the Linux kernel, the following vulnerability has been resolved: tracing/hist: Fix out-of-bound write on 'actiondata.varrefidx' When generate a synthetic event with many params and then create a trace action for it 1, kernel panic happened 2. It is because that in traceactioncreate...
EUVD-2025-32782
In the Linux kernel, the following vulnerability has been resolved: tracing/hist: Fix out-of-bound write on 'actiondata.varrefidx' When generate a synthetic event with many params and then create a trace action for it 1, kernel panic happened 2. It is because that in traceactioncreate...
CVE-2022-50553
In the Linux kernel, the following vulnerability has been resolved: tracing/hist: Fix out-of-bound write on 'actiondata.varrefidx' When generate a synthetic event with many params and then create a trace action for it 1, kernel panic happened 2. It is because that in traceactioncreate...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-399433)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-399433 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: ref-verify: fix use-after-free after invalid ref action At btrfsreftreemod after we...
EUVD-2021-34674
Malicious code in bioql PyPI...
EUVD-2025-5155
Malicious code in bioql PyPI...
EUVD-2024-1438
Malicious code in bioql PyPI...
EUVD-2023-52100
Malicious code in bioql PyPI...
EUVD-2022-53351
Malicious code in bioql PyPI...
EUVD-2025-26997
Malicious code in bioql PyPI...
EUVD-2025-11209
Malicious code in bioql PyPI...
EUVD-2025-7592
Malicious code in bioql PyPI...
EUVD-2025-29715
Malicious code in bioql PyPI...
EUVD-2025-15748
Malicious code in bioql PyPI...
CVE-2025-59538
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. For versions 2.9.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.6 and 3.0.17, when the webhook.azuredevops.username and webhook.azuredevops.password are not set in the default configuration, the /api/webhook endpoi...
PT-2025-40045
Summary In the default configuration, webhook.azuredevops.username and webhook.azuredevops.password not set, Argo CD’s /api/webhook endpoint crashes the entire argocd-server process when it receives an Azure DevOps Push event whose JSON array resource.refUpdates is empty. The slice index 0 is...