6540 matches found
Ashlar-Vellum Cobalt 缓冲区错误漏洞
Ashlar-Vellum Cobalt is a parameter-based computer-aided design and 3D modeling program from Ashlar-Vellum. A buffer error vulnerability exists in Ashlar-Vellum Cobalt that stems from a lack of proper validation of user-supplied data during the parsing of XE files, which could lead to out-of-boun...
Linux Distros Unpatched Vulnerability : CVE-2022-50255
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tracing: Fix reading strings from synthetic events The follow commands caused a crash: cd...
CVE-2025-43793
CVE-2025-43793 affects Liferay Portal (7.4.0–7.4.3.105) and Liferay DXP (2023.Q4.0, 2023.Q3.1–2023.Q3.4, 7.4 GA–update 92, 7.3 GA–update 35). The issue is improper subdomain/domain subcomponent identification that can create a supercookie, enabling remote attackers controlling a website sharing t...
DEBIAN-CVE-2022-50255
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix reading strings from synthetic events The follow commands caused a crash: cd /sys/kernel/tracing echo 's:open char file' dynamicevents echo 'hist:keys=commonpid:file=filename:onchange$file.traceopen,$file'...
UBUNTU-CVE-2022-50255
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix reading strings from synthetic events The follow commands caused a crash: cd /sys/kernel/tracing echo 's:open char file' dynamicevents echo 'hist:keys=commonpid:file=filename:onchange$file.traceopen,$file'...
CVE-2022-50255 tracing: Fix reading strings from synthetic events
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix reading strings from synthetic events The follow commands caused a crash: cd /sys/kernel/tracing echo 's:open char file' dynamicevents echo 'hist:keys=commonpid:file=filename:onchange$file.traceopen,$file'...
CVE-2022-50255 tracing: Fix reading strings from synthetic events
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix reading strings from synthetic events The follow commands caused a crash: cd /sys/kernel/tracing echo 's:open char file' dynamicevents echo 'hist:keys=commonpid:file=filename:onchange$file.traceopen,$file'...
Liferay Portal和Liferay DXP 安全漏洞
Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from unsafe reading of strings, which could lead to a crash during userspace address access...
Fedora 42 : niri / xwayland-satellite (2025-852b3e077d)
The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-852b3e077d advisory. Update niri to version 25.08 and xwayland-satellite to version 0.7. Notably, niri now supports xwayland out-of-the-box without manual configuration, and...
Fedora 41 : niri / xwayland-satellite (2025-2bcbe8b09c)
The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-2bcbe8b09c advisory. Update niri to version 25.08 and xwayland-satellite to version 0.7. Notably, niri now supports xwayland out-of-the-box without manual configuration, and...
CLSA-2025-1757666692 libtiff: Fix of CVE-2017-9117
CVE-2017-9117: add checks for all BMP reading operations to avoid buffer overflow...
LangChain Go 安全漏洞
LangChain Go is a simple framework for writing LLM-based programs in Go by the individual developer Travis Cline. A security vulnerability exists in LangChain Go version 0.1.14, which stems from support for include and extends syntax for reading files, and could lead to a server-side template...
Tianocore EDK2 Heap Buffer Overflow DoS
The vulnerability of the HashPeImageByType function in the Tianocore EDK2 library is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...
Linux Distros Unpatched Vulnerability : CVE-2011-1416
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Research In Motion RIM BlackBerry Torch 9800 with firmware 6.0.0.246 allows attackers to read the contents of memory locations via unknown vectors, as...
CVE-2025-7746
CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause an unvalidated data injected by a malicious user potentially leading to modify or read data in a victim’s browser...
CVE-2025-7746
CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause an unvalidated data injected by a malicious user potentially leading to modify or read data in a victim’s browser...
PT-2025-36517
Name of the Vulnerable Software and Affected Versions: IBM Concert Software versions 1.0.0 through 1.1.0 Description: IBM Concert Software versions 1.0.0 through 1.1.0 may allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory...
ROS-20250908-09
A vulnerability in the JSSE component of the Oracle Java SE software platform is related to insufficient validation of the of input data. Exploitation of the vulnerability could allow an attacker acting remotely to gain unauthorized access to modify, delete and read protected information using th...
