209183 matches found
Medium: oci-add-hooks
Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...
Medium: docker
Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...
PT-2026-110891
Name of the Vulnerable Software and Affected Versions IBM Db2 Recovery Expert for Linux, UNIX and Windows version 5.5 IF 2 Description An unauthenticated attacker can embed arbitrary JavaScript code in the Web UI. This cross-site scripting issue allows the attacker to alter intended functionality...
PT-2026-110892
Name of the Vulnerable Software and Affected Versions IBM DB2 Recovery Expert for Linux, UNIX and Windows version 5.5 IF 2 Description The software uses a web link containing untrusted references to an external site. This allows a remote attacker to potentially expose sensitive information or...
PT-2026-110660
Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.0.0 through 3.31.0 Description An incorrect permission assignment allows local users to read private keys created by the crypto write pem function that lack owner-only permissions. On multi-user Unix hosts, attackers can...
PT-2026-110661
FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulnerability in winpr-makecert that creates unencrypted private keys without owner-only file modes. Local users on multi-user Unix hosts can read world-readable key files or open PFX files protected by the hard-coded default passwo...
ROS-20261012-73-0272
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261012-73-0223
The vulnerability of the getmanufinfo function in the drivers/usb/serial/ioti.c file of the Linux device driver for USB devices is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
ROS-20261012-73-0221
The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20261012-73-0215
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261012-73-0209
The vulnerability of the hidpostreset function in the drivers/hid/usbhid/hid-core.c file of the Linux kernel subsystem for user interface devices leads to a mutual locking mechanism being activated. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20261012-73-0207
The vulnerability in the kernel-lt is related to a single-bit offset error. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261012-73-0203
The vulnerability of the klsi105preparewritebuffer function in the drivers/usb/serial/kl5kusb105.c module of the Linux kernel is related to the issue of operations going beyond the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
ROS-20261012-73-0201
The vulnerability in the kernel-lt is related to incorrect blocking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261012-73-0182
The vulnerability in the kernel-lt is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261012-73-0180
The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20261012-73-0173
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261012-73-0165
The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...