26420 matches found
GHSA-92M3-M5PW-P2X9 vulnerabilities
Vulnerabilities for packages: chromium...
The vulnerability of the cifs_sync_mid_result() function in the fs/smb/client/transport.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the cifssyncmidresult function in the fs/smb/client/transport.c module of the Linux operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
Wind River Systems VxWorks 安全漏洞
Wind River Systems VxWorks is an embedded real-time operating system from Wind River Systems USA. It is used in communications, military, aerospace, and other real-time demanding applications. A security vulnerability exists in Wind River Systems VxWorks 7 versions 22.06 through 24.03, which stem...
The vulnerability of the arena_map_mem_usage() function in the kernel/bpf/arena.c module of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the arenamapmemusage function in the kernel/bpf/arena.c module of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the ax25_addr_ax25dev() function in the net/ax25/ax25_dev.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the ax25addrax25dev function in the net/ax25/ax25dev.c module of the Linux operating system is related to a resource leak. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the is_dsc_need_re_compute() function in the drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_mst_types.c file of the driver support infrastructure for AMD graphics cards in Linux operating systems allows a attacker to cause a service failure.
The vulnerability of the isdscneedrecompute function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudmmsttypes.c file of the DRI support driver for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a...
CVE-2024-12217
CVE-2024-12217 affects the gradio-app/gradio project (commit git 67e4044). The flaw in the blocked_path implementation on Windows allows path traversal via NTFS Alternate Data Streams syntax (e.g., C:/tmp/secret.txt::$DATA), bypassing blocks that prevent access to restricted files and enabling re...
Apple iOS和Apple iPadOS 安全漏洞
Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS and Apple iPadOS that stems from memory handling improvements and could resul...
Siemens SCALANCE LPE9403 Operating System Command Injection Vulnerability
Siemens SCALANCE LPE9403 is a local processing engine for industrial field data processing from Siemens. It is used to capture, collect and pre-process industrial field data. The SCALANCE LPE9403 6GK5998-3GS00-2AC2 suffers from an operating system command injection vulnerability that originates...
vLLM 操作系统命令注入漏洞
vLLM is a vLLM open source high throughput and memory efficient inference and service engine for LLM. An operating system command injection vulnerability exists in vLLM version 0.6.0, which stems from a failure to clean up deserialized data in the AsyncEngineRPCServer function, which could lead t...
Malicious code in github.com/shadowybulk/hypert (Go)
--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 80a941bac0303482eb50ebe17fbfa05f22640a3932940be16100c6a1c0357a04 Malcious typosquatting Go packages targeting Linux and macOS systems used to as a loader to download and run another malicious payload...
Moderate: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Exploit for Uncontrolled Search Path Element in Imagemagick
ImageMagick Arbitrary Code Execution CVE-2024-41817 Proof o...
Dell SmartFabric OS10 Command Injection Vulnerability (CNVD-2025-15191)
Dell SmartFabric OS10 is a software-defined network operating system from Dell Networking, based on Linux and open source technologies, designed to enable flexible management and automated deployment of data center network resources. Dell SmartFabric OS10 suffers from a command injection...
Dell SmartFabric OS10 Mismanagement of Privileges Vulnerability
Dell SmartFabric OS10 is a software-defined network operating system from Dell Networking, based on Linux and open source technologies, designed to enable flexible management and automated deployment of data center network resources. A mismanagement of privileges vulnerability exists in Dell...
Dell SmartFabric OS10 Command Injection Vulnerability (CNVD-2025-15192)
Dell SmartFabric OS10 is a software-defined network operating system from Dell Networking, based on Linux and open source technologies, designed to enable flexible management and automated deployment of data center network resources. Dell SmartFabric OS10 suffers from a command injection...
Dell SmartFabric OS10 Command Injection Vulnerability
Dell SmartFabric OS10 is a Linux-based network switch operating system from Dell Dell. Dell SmartFabric OS10 suffers from a command injection vulnerability that originates from improper neutralization of special elements in a command, which can be exploited by an attacker to cause a command to be...
The vulnerability of the btmtk_process_coredump() function in the drivers/bluetooth/btmtk.c Bluetooth driver module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the btmtkprocesscoredump function in the drivers/bluetooth/btmtk.c Bluetooth driver module of the Linux operating system is related to improper memory release before deleting the last pointer memory leak. Exploiting this vulnerability could allow an attacker to cause a system...
Dell SmartFabric OS10 Command Injection Vulnerability (CNVD-2025-15193)
Dell SmartFabric OS10 is a software-defined network operating system from Dell Networking, based on Linux and open source technologies, designed to enable flexible management and automated deployment of data center network resources. Dell SmartFabric OS10 suffers from a command injection...
