12473 matches found
PT-2026-116896
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad sigma delta: fix use-after-free on unbind ad sd buffer postenable allocates sigma delta-samples buf with devm krealloc at runtime, so its devres entry sits after all probe-time entries of the driver. devm resources a...
EUVD-2024-55802
MP4v2 through 2.1.3 contains a heap-based out-of-bounds read in MP4File::GetChapters that allows attackers to read past heap allocations via crafted QuickTime chapter samples. Attackers can supply an MP4 file whose chapter sample is shorter than its declared title length, crashing applications li...
UBUNTU-CVE-2024-58397
MP4v2 through 2.1.3 contains a heap-based out-of-bounds read in MP4File::GetChapters that allows attackers to read past heap allocations via crafted QuickTime chapter samples. Attackers can supply an MP4 file whose chapter sample is shorter than its declared title length, crashing applications li...
CVE-2024-58397
MP4v2 through 2.1.3 contains a heap-based out-of-bounds read in MP4File::GetChapters that allows attackers to read past heap allocations via crafted QuickTime chapter samples. Attackers can supply an MP4 file whose chapter sample is shorter than its declared title length, crashing applications li...
CVE-2024-58397
MP4v2 through 2.1.3 contains a heap-based out-of-bounds read in MP4File::GetChapters that allows attackers to read past heap allocations via crafted QuickTime chapter samples. Attackers can supply an MP4 file whose chapter sample is shorter than its declared title length, crashing applications li...
Astra Linux – Vulnerability in speex
A vulnerability involving division by zero in the static int readsamples function of Speex v1.2 allows attackers to cause a Denial-of-Service attack through a specially crafted WAV file...
Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: samples/bpf: Buffer overflow has been fixed in tcpbasertt. Using sizeofnv or strlennv+1 is correct...
PT-2026-115260
Name of the Vulnerable Software and Affected Versions MP4v2 versions 2.0.0 through 2.1.3 Description A heap-based out-of-bounds read exists in the GetChapters function of the MP4File class. This occurs when an attacker provides a specially crafted MP4 file where the chapter sample is shorter than...
PT-2026-122365
Security vulnerability affects the gst-plugins-good package. The qtdemux parse samples function in gst/isomp4/qtdemux...
CVE-2026-107176
A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, and watch permissions on all Secret resources without resourceNames scoping. The operator only requires access to the pull-secret Secret. If the samples-operat...
CVE-2026-107176
A vulnerability exists in the cluster-samples-operator where the RBAC Role coreos-pull-secret-reader in the openshift-config namespace grants excessive permissions. The role provides get, list, and watch access to all Secret resources because it lacks resourceNames scoping, even though the operat...
CVE-2026-107176
A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, and watch permissions on all Secret resources without resourceNames scoping. The operator only requires access to the pull-secret Secret. If the samples-operat...
CVE-2026-107176 Cluster-samples-operator: role reads all secrets in openshift-config, not just pull-secret
A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, and watch permissions on all Secret resources without resourceNames scoping. The operator only requires access to the pull-secret Secret. If the samples-operat...
EUVD-2026-94581
A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, and watch permissions on all Secret resources without resourceNames scoping. The operator only requires access to the pull-secret Secret. If the samples-operat...
CVE-2026-107176 Cluster-samples-operator: role reads all secrets in openshift-config, not just pull-secret
A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, and watch permissions on all Secret resources without resourceNames scoping. The operator only requires access to the pull-secret Secret. If the samples-operat...
CVE-2026-107176
A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, and watch permissions on all Secret resources without resourceNames scoping. The operator only requires access to the pull-secret Secret. If the samples-operat...
CVE-2026-107176: Execution with Unnecessary Privileges
A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, and watch permissions on all Secret resources without resourceNames scoping. The operator only requires access to the pull-secret Secret. If the samples-operat...
PT-2026-107666
A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, and watch permissions on all Secret resources without resourceNames scoping. The operator only requires access to the pull-secret Secret. If the samples-operat...
log4j-samples
log4j-muestras Muestras de versiones de la librería log4j para ayudar a los escáneres/detectores de log4j incluyendo nuestro propio log4j-detector a mejorar su precisión para detectar CVE-2021-45046 y CVE-2021-44228. Las muestras incluyen jars sombreados, uber jars, jars ejecutables de spring-boo...