13097 matches found
GSD-2023-1000865 drm/i915/gvt: fix gvt debugfs destroy
drm/i915/gvt: fix gvt debugfs destroy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit ae9a61511736cc71a99f01e8b7b90f6fb6128ed...
GSD-2023-1000769 selftests/bpf: fix memory leak of lsm_cgroup
selftests/bpf: fix memory leak of lsmcgroup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...
GSD-2023-1000567 ipv6/sit: use DEV_STATS_INC() to avoid data-races
ipv6/sit: use DEVSTATSINC to avoid data-races This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...
GSD-2023-1000557 bpf: Prevent decl_tag from being referenced in func_proto arg
bpf: Prevent decltag from being referenced in funcproto arg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...
GSD-2023-1000548 blk-mq: fix possible memleak when register 'hctx' failed
blk-mq: fix possible memleak when register 'hctx' failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...
GSD-2023-1000547 iio: fix memory leak in iio_device_register_eventset()
iio: fix memory leak in iiodeviceregistereventset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...
GSD-2023-1000517 drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid()
drm/sti: Fix return type of stidvo,hda,hdmiconnectormodevalid This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...
GSD-2023-1000397 ext4: init quota for 'old.inode' in 'ext4_rename'
ext4: init quota for 'old.inode' in 'ext4rename' This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...
GSD-2023-1000356 HID: core: fix shift-out-of-bounds in hid_report_raw_event
HID: core: fix shift-out-of-bounds in hidreportrawevent This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.302 by commit...
GSD-2023-1000094 net/mlx5e: Fix use-after-free when reverting termination table
net/mlx5e: Fix use-after-free when reverting termination table This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...
CVE-2022-4121
In libetpan a null pointer dereference in mailimapmailboxdatastatusfree in low-level/imap/mailimaptypes.c was found that could lead to a remote denial of service or other potential consequences...
PT-2023-34110 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue is related to a shift-out-of-bounds in check special flags. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...
DLA-3270-1 net-snmp - security update
Bulletin has no description...
Publify Improper Input Validation vulnerability
Improper Input Validation in GitHub repository publify/publify prior to 9.2.10...
SQL Injection
salesforce.sdk.core is vulnerable to SQL injection. The vulnerability exists in QuerySpec.cs because the user provided inputs for are not properly validated which allows an attacker to inject and execute malicious SQL queries in the system...
Zip4j Origin Validation Error
Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive. This issue has been fixed in version 2.11.3...
ADC /13.0 / renew certificates
Assist in cases of clients who need to renew a certificate that is about to expire...
Prototype Pollution
tree-kit is vulnerable to prototype pollution. The vulnerability exists in the op function of browser/tree-kit.js, due to the improper checks for the key variable which allows an attacker to modify object prototype attributes...
PT-2023-12371 · Hewlett Packard · Hpe
Name of the Vulnerable Software and Affected Versions: HPE affected versions not specified Description: The issue concerns a vulnerability that was initially assigned a CVE number but was unused by HPE. The details of this issue are available via the National Vulnerability Database...