316 matches found
EUVD-2018-4306
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414463)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414463 advisory. Incomplete cleanup in specific special register write operations for some IntelR Processors may allow an authenticated user to potentially enable information...
EUVD-2022-49115
Malicious code in bioql PyPI...
EUVD-2024-23301
Malicious code in bioql PyPI...
EUVD-2021-9596
Malicious code in bioql PyPI...
EUVD-2021-9574
Malicious code in bioql PyPI...
EUVD-2022-32140
Malicious code in bioql PyPI...
EUVD-2023-32785
Malicious code in bioql PyPI...
AMD Graphics Driver 安全漏洞
AMD Graphics Driver is an integrated graphics driver from UltraMicroelectronics AMD. A security vulnerability exists in AMD Graphics Driver that stems from insufficient parameter cleanup, which could lead an attacker to issue a malformed DRVSOCCMDIDSRIOVSPATIALPART command, resulting in a loss of...
CVE-2024-21977
Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the RDRAND instruction, potentially resulting in loss of integrity for SEV-SNP guests...
tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame
A flaw was found in Apache Tomcat. This vulnerability allows an application-level denial of service DoS, causing it to become unresponsive or slow via maliciously crafted HTTP/2 prioritization headers. It performs an incomplete cleanup of failed requests, which triggers a memory leak...
tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame
A flaw was found in Apache Tomcat. This vulnerability allows an application-level denial of service DoS, causing it to become unresponsive or slow via maliciously crafted HTTP/2 prioritization headers. It performs an incomplete cleanup of failed requests, which triggers a memory leak...
Malicious code in fneves-my-test-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 815b581bf6795de9c99486eb17b7d30b47b6d5619cb296f97499f4149b9231c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-29184
An incomplete cleanup vulnerability CWE-459 in FortiOS 7.2 all versions and before & FortiProxy version 7.2.0 through 7.2.2 and before 7.0.8 allows a VDOM privileged attacker to add SSH key files on the system silently via crafted CLI requests...
CVE-2023-29184
CVE-2023-29184 describes an incomplete cleanup (CWE-459) vulnerability affecting Fortinet FortiOS and FortiProxy. Affected: FortiOS 7.2 all versions and earlier, and FortiProxy 7.2.0–7.2.2 and before 7.0.8. Exploitation allows a VDOM-privileged attacker to silently add SSH key files via crafted C...
CVE-2024-26005
An unauthenticated remote attacker can gain service level privileges through an incomplete cleanup during service restart after a DoS...
CVE-2024-6300
Incomplete cleanup when performing redactions in Conduit, allowing an attacker to check whether certain strings were present in the PDU before redaction...
CVE-2022-46298
Incomplete cleanup for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access...