25098 matches found
CVE-2024-56772 kunit: string-stream: Fix a UAF bug in kunit_init_suite()
In the Linux kernel, the following vulnerability has been resolved: kunit: string-stream: Fix a UAF bug in kunitinitsuite In kunitdebugfscreatesuite, if allocstringstream fails in the kunitsuiteforeachtestcase loop, the "suite-log = stream" has assigned before, and the error path only free the...
PT-2025-3319
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-rc4+ Description A Use-After-Free UAF bug has been fixed in the Linux kernel's KUnit string stream function. The issue occurs when alloc string stream fails in the kunit suite for each test case loop,...
SonicOS Multiple Post-authentication Vulnerabilities
1 CVE-2024-12803 - SonicOS Post-authentication Stack-based buffer overflow vulnerabilityA post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution. CVSS Score: 6.0 CVSS Vector:...
OSV-2025-7 Heap-buffer-overflow in oatpp::json::Utils::escapeUtf8Char
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=387626404 Crash type: Heap-buffer-overflow WRITE 1 Crash state: oatpp::json::Utils::escapeUtf8Char oatpp::json::Utils::escapeString oatpp::json::Serializer::serializeString...
PT-2025-5666 · Oatpp · Oatpp
Name of the Vulnerable Software and Affected Versions: oatpp affected versions not specified Description: The issue is related to a heap-buffer-overflow error. Technical details about the error include the escapeUtf8Char and escapeString functions within oatpp::json::Utils, and the serializeStrin...
CVE-2024-56828
File Upload vulnerability in ChestnutCMS through 1.5.0. Based on the code analysis, it was determined that the /api/member/avatar API endpoint receives a base64 string as input. This string is then passed to the memberService.uploadAvatarByBase64 method for processing. Within the service, the...
CVE-2024-56828
File Upload vulnerability in ChestnutCMS through 1.5.0. Based on the code analysis, it was determined that the /api/member/avatar API endpoint receives a base64 string as input. This string is then passed to the memberService.uploadAvatarByBase64 method for processing. Within the service, the...
CVE-2024-56828
File Upload vulnerability in ChestnutCMS through 1.5.0. Based on the code analysis, it was determined that the /api/member/avatar API endpoint receives a base64 string as input. This string is then passed to the memberService.uploadAvatarByBase64 method for processing. Within the service, the...
CVE-2024-56828
ChestnutCMS versions prior to 1.5.0 are vulnerable to a file upload flaw in the /api/member/avatar API endpoint. The memberService.uploadAvatarByBase64 method accepts a base64 string, extracts the content, and writes it to a file without validating the file extension derived from the suffix varia...
PT-2025-53805
Name of the Vulnerable Software and Affected Versions qs versions prior to 6.14.1 Description A flaw exists in the qs parse modules library where the arrayLimit option does not properly enforce limits when using bracket notation in query strings, leading to a potential HTTP Denial of Service DoS...
PT-2025-34375 · Spim +1 · Spim +1
Name of the Vulnerable Software and Affected Versions: spim versions prior to 9.1.24 Description: spimsimulator spim is susceptible to a buffer overflow in the READ STRING SYSCALL function. Recommendations: Update to a version newer than 9.1.24...
PT-2026-2884
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.54-syzkaller-00144-g5f0270f1ba00 Description The Linux kernel contains an issue in the ext4 filesystem related to string handling within the parse apply sb mount options function. The strscpy pad function is...
SUSE CVE-2024-56745
In the Linux kernel, the following vulnerability has been resolved: PCI: Fix resetmethodstore memory leak In resetmethodstore, a string is allocated via kstrndup and assigned to the local "options". options is then used in with strsep to find spaces: while name = strsep&options, " " != NULL If...
PT-2025-3655
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue concerns a common bug in the Linux kernel where a TRACE EVENT TP fast assign assigns an address of an allocated string to the ring buffer and then references it in TP printk, which ca...
UBUNTU-CVE-2024-56745
In the Linux kernel, the following vulnerability has been resolved: PCI: Fix resetmethodstore memory leak In resetmethodstore, a string is allocated via kstrndup and assigned to the local "options". options is then used in with strsep to find spaces: while name = strsep&options, " " != NULL If...
CVE-2024-56745
CVE-2024-56745 : Linux kernel vulnerability where reset_method_store() leaked allocated memory (via kstrndup) when parsing a string with strsep, because options could be freed after strsep nulled it. A fix preserves the original options string by iterating with a separate tmp_options, preventing ...
MAL-2024-12185 Malicious code in dscss (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron fb41535db040ebc6147f3cfe1bfc3f5638402e85fc889d78d6101814d6f4bc10 This package contains a highly obfuscated code and executes the code in a long hexadecimal string...
Malicious code in dscss (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron fb41535db040ebc6147f3cfe1bfc3f5638402e85fc889d78d6101814d6f4bc10 This package contains a highly obfuscated code and executes the code in a long hexadecimal string...
SUSE CVE-2024-53233
In the Linux kernel, the following vulnerability has been resolved: unicode: Fix utf8load error path utf8load requests the symbol "utf8datatable" and then checks if the requested UTF-8 version is supported. If it's unsupported, it tries to put the data table using symbolput. If an unsupported...