Lucene search
K

18 matches found

UbuntuCve
UbuntuCve
added 2026/01/14 3:16 p.m.2 views

CVE-2025-71111

In the Linux kernel, the following vulnerability has been resolved: hwmon: w83791d Convert macros to functions to avoid TOCTOU The macro FANFROMREG evaluates its arguments multiple times. When used in lockless contexts involving shared driver data, this leads to Time-of-Check to Time-of-Use TOCTO...

4.7CVSS5.9AI score0.00089EPSS
Exploits0References35
NVD
NVD
added 2026/01/14 3:16 p.m.3 views

CVE-2025-71111

In the Linux kernel, the following vulnerability has been resolved: hwmon: w83791d Convert macros to functions to avoid TOCTOU The macro FANFROMREG evaluates its arguments multiple times. When used in lockless contexts involving shared driver data, this leads to Time-of-Check to Time-of-Use TOCTO...

4.7CVSS0.00089EPSS
Exploits0References7
ATTACKERKB
ATTACKERKB
added 2026/01/14 3:5 p.m.4 views

CVE-2025-71111

In the Linux kernel, the following vulnerability has been resolved: hwmon: w83791d Convert macros to functions to avoid TOCTOU The macro FANFROMREG evaluates its arguments multiple times. When used in lockless contexts involving shared driver data, this leads to Time-of-Check to Time-of-Use TOCTO...

5.2AI score0.00089EPSS
Exploits0References8Affected Software1
CVE
CVE
added 2026/01/14 3:5 p.m.16 views

CVE-2025-71111

CVE-2025-71111 (Linux kernel) : A TOCTOU race in hwmon w83791d caused by a macro, FAN_FROM_REG, evaluating arguments multiple times in lockless contexts, potentially triggering divide-by-zero. The fix converts the macro to a static function (arguments evaluated once, by-value). Additionally, stor...

4.7CVSS6.1AI score0.00089EPSS
Exploits0References7Affected Software1
Debian CVE
Debian CVE
added 2026/01/14 3:5 p.m.3 views

CVE-2025-71111

In the Linux kernel, the following vulnerability has been resolved: hwmon: w83791d Convert macros to functions to avoid TOCTOU The macro FANFROMREG evaluates its arguments multiple times. When used in lockless contexts involving shared driver data, this leads to Time-of-Check to Time-of-Use TOCTO...

4.7CVSS5.3AI score0.00089EPSS
Exploits0
OSV
OSV
added 2026/01/14 3:5 p.m.2 views

CVE-2025-71111 hwmon: (w83791d) Convert macros to functions to avoid TOCTOU

In the Linux kernel, the following vulnerability has been resolved: hwmon: w83791d Convert macros to functions to avoid TOCTOU The macro FANFROMREG evaluates its arguments multiple times. When used in lockless contexts involving shared driver data, this leads to Time-of-Check to Time-of-Use TOCTO...

4.7CVSS5.3AI score0.00089EPSS
Exploits0References10
Vulnrichment
Vulnrichment
added 2026/01/14 3:5 p.m.2 views

CVE-2025-71111 hwmon: (w83791d) Convert macros to functions to avoid TOCTOU

In the Linux kernel, the following vulnerability has been resolved: hwmon: w83791d Convert macros to functions to avoid TOCTOU The macro FANFROMREG evaluates its arguments multiple times. When used in lockless contexts involving shared driver data, this leads to Time-of-Check to Time-of-Use TOCTO...

5.6AI score0.00089EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2016-6082

Malware in sbrugna...

8.8CVSS8.6AI score0.0227EPSS
Exploits0References39
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2021-2010

Malware in sbrugna...

7.5CVSS7.6AI score0.01016EPSS
Exploits1References5
OSV
OSV
added 2022/01/31 11:15 a.m.2 views

UBUNTU-CVE-2021-23520

The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip via the ZipFile::uncompressEntry function in juceZipFile.cpp. This vulnerability is triggered when the archive is extracted upon calling uncompressTo on a ZipFile object...

9.8CVSS5.8AI score0.01077EPSS
Exploits1References5
CNNVD
CNNVD
added 2021/09/02 12:0 a.m.0 views

libsolv 缓冲区错误漏洞

libsolv is a library for checking package dependencies. libsolv versions prior to 0.7.17 have a buffer overflow vulnerability in the function pruneto in src/policy.c, which can be exploited by attackers to cause a denial of service...

7.5CVSS6AI score0.01323EPSS
Exploits1References19
Cvelist
Cvelist
added 2021/08/24 7:45 a.m.14 views

CVE-2021-23429 Denial of Service (DoS)

All versions of package transpile are vulnerable to Denial of Service DoS due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to function...

6.5CVSS7.7AI score0.01016EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/08/24 12:0 a.m.1 views

transpile 路径遍历漏洞

transpile is an open source package that converts JavaScript modules from one format to another. transpile suffers from a security vulnerability that stems from the application's lack of input sanitization or whitelisting, combined with poor exception handling in the .to function, which makes it...

7.5CVSS7.3AI score0.01779EPSS
Exploits1References2
Snyk
Snyk
added 2021/05/11 4:8 p.m.1 views

Denial of Service (DoS)

Overview transpile is a Transpiles JavaScript modules from one format to another. Affected versions of this package are vulnerable to Denial of Service DoS due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to function. PoC Base code: var transpi...

7.5CVSS7AI score0.01016EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2020/07/23 12:0 a.m.48 views

Amazon Linux 2 : libxml2 (ALAS-2020-1466)

The version of libxml2 installed on the remote host is prior to 2.9.1-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1466 advisory. A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval function of libxml2 through 2.9.8 when...

8.8CVSS7.2AI score0.043EPSS
Exploits3References13
Tenable Nessus
Tenable Nessus
added 2018/06/28 12:0 a.m.62 views

EulerOS 2.0 SP3 : libxml2 (EulerOS-SA-2018-1156)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial ...

9.8CVSS7.5AI score0.05928EPSS
Exploits0References4
Prion
Prion
added 2016/07/23 7:59 p.m.22 views

Design/Logic Flaw

Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function...

6.8CVSS7.6AI score0.0227EPSS
Exploits0References25Affected Software14
UbuntuCve
UbuntuCve
added 2016/07/23 12:0 a.m.37 views

CVE-2016-5131

Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function...

8.8CVSS7.2AI score0.0227EPSS
Exploits0References4
Rows per page
Query Builder