13280 matches found
The vulnerability of the adv7842_cp_log_status() function in the drivers/media/i2c/adv7842.c file of the Linux kernel’s multimedia device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the adv7842cplogstatus function in the drivers/media/i2c/adv7842.c file of the Linux kernel’s multimedia device driver is related to the lack of checking of the returned value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...
CVE-2026-2302
Under specific conditions when processing a maliciously crafted value of type Hash r, Mongoid::Criteria.fromhash may allow for executing arbitrary Ruby code...
CVE-2025-31648
CVE-2025-31648 pertains to Intel microcode flow handling in some Intel Processor Family. The vulnerability arises from improper handling of values within the microcode flow, enabling a local escalation of privilege when paired with startup code and an SMM adversary with a privileged user and a hi...
CVE-2026-23684 Race condition vulnerability in SAP Commerce Cloud
A race condition vulnerability exists in the SAP Commerce cloud. Because of this when an attacker adds products to a cart, it may result in a cart entry being created with erroneous product value which could be checked out. This leads to high impact on data integrity, with no impact on data...
Siemens S7-1500 Unchecked Return Value (CVE-2025-11839)
A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tgtagtype of the file prdbg.c. Performing manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be exploited. This plugin onl...
PT-2026-7435
Name of the Vulnerable Software and Affected Versions Mongoid affected versions not specified Description Under specific conditions, processing a maliciously crafted Hash r value within the Mongoid::Criteria.from hash function may allow for the execution of arbitrary Ruby code. Recommendations At...
GHSA-87R5-MP6G-5W5J jsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions
Impact Arbitrary Code Injection Remote Code Execution & XSS: A critical security vulnerability affects all versions of the jsonpath package. The library relies on the static-eval module to evaluate JSON Path expressions but fails to properly sanitize or sandbox the input. This allows an attacker ...
CVE-2025-15564
A vulnerability has been found in Mapnik up to 4.2.0. This vulnerability affects the function mapnik::detail::mod::operator of the file src/value.cpp. The manipulation leads to divide by zero. The attack needs to be performed locally. The exploit has been disclosed to the public and may be used...
ROS-20260209-73-0016
Vulnerability in binutils related to an unchecked return value. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
The vulnerability of the nilfs_bmap_lookup_at_level() function in the fs/niljs2/bmap.c file of the NILFS2 file system of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the nilfsbmaplookupatlevel function in the fs/nilfs2/bmap.c file of the NILFS2 file system in the Linux operating system is related to incorrect checking of the returned value from this function. Exploiting this vulnerability could allow an attacker to cause a service failure...
VulnCheck KEV: CVE-2009-2267
VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, VMware ACE 2.5.x before 2.5.3 build 185404, VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138, VMware Fusion 2.x before 2.0.6 build 196839, VMware ESXi 3.5 and 4.0, and...
CVE-2026-1675
The Advanced Country Blocker plugin for WordPress is vulnerable to Authorization Bypass in all versions up to, and including, 2.3.1 due to the use of a predictable default value for the secret bypass key created during installation without requiring users to change it. This makes it possible for...
OSV-2026-209 Use-of-uninitialized-value in ntrip_parse_url
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=482281265 Crash type: Use-of-uninitialized-value Crash state: ntripparseurl FuzzClient.c...
The vulnerability of the nfsd_net_init() function in the fs/nfsd/nfsctl.c module, which supports the NFS network file system in Linux kernels, allows a attacker to cause a service failure.
The vulnerability of the nfsdnetinit function in the fs/nfsd/nfsctl.c module, which supports the NFS network file system in Linux kernels, is related to the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2025-15564 Mapnik value.cpp operator divide by zero
A vulnerability has been found in Mapnik up to 4.2.0. This vulnerability affects the function mapnik::detail::mod::operator of the file src/value.cpp. The manipulation leads to divide by zero. The attack needs to be performed locally. The exploit has been disclosed to the public and may be used...
CVE-2025-15564 Mapnik value.cpp operator divide by zero
A vulnerability has been found in Mapnik up to 4.2.0. This vulnerability affects the function mapnik::detail::mod::operator of the file src/value.cpp. The manipulation leads to divide by zero. The attack needs to be performed locally. The exploit has been disclosed to the public and may be used...
CVE-2025-15564
Mapnik < 4.2.0 is affected by CVE-2025-15564 in mapnik::detail::mod::operator (src/value.cpp), causing a divide-by-zero. The flaw requires local access and has publicly disclosed exploit information; multiple feeds (NVD, Red Hat, Ubuntu, OSV, Debian, etc.) corroborate. The vulnerability impact...
PT-2026-6805
Name of the Vulnerable Software and Affected Versions OpenProject versions prior to 16.6.7 OpenProject versions prior to 17.0.3 Description OpenProject is a web-based project management software. A flaw exists in the repository changes endpoint '/projects/:project id/repository/changes' when...
OSV-2026-195 Use-of-uninitialized-value in vcardstructured_free
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=481458325 Crash type: Use-of-uninitialized-value Crash state: vcardstructuredfree vcardparameterfree vcardpropertyfree...
The vulnerability of the pinmux_func_name_to_selector() function in the drivers/pinctrl/pinmux.c file of the GPIO controller driver for Linux kernel, which allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the pinmuxfuncnametoselector function in the drivers/pinctrl/pinmux.c file, a driver for LINUX operating system GPIO controllers, is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...