16181 matches found
PT-2025-51641
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The create in format blob function in the Linux kernel’s DRM/plane subsystem could return a NULL pointer instead of a valid pointer or an error value. This could lead to a system crash...
PT-2025-51728
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where an incorrect error return value during device probe can lead to system instability. Specifically, after DME Link Startup, a failure during drive...
CVE-2025-14667
A security vulnerability has been detected in itsourcecode COVID Tracking System 1.0. The impacted element is an unknown function of the file /admin/?page=systeminfo. Such manipulation of the argument metavalue leads to sql injection. The attack may be performed from remote. The exploit has been...
yara:rules_fuzzer: Use-of-uninitialized-value in yr_parse_re_string
Project: https://github.com/VirusTotal/yara.git Detailed Report: https://oss-fuzz.com/testcase?key=5251822974730240 Project: yara Fuzzing Engine: libFuzzer Fuzz Target: rulesfuzzer Job Type: libfuzzermsanyara Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
yara:rules_fuzzer: Use-of-uninitialized-value in yara_yyparse
Project: https://github.com/VirusTotal/yara.git Detailed Report: https://oss-fuzz.com/testcase?key=4654647131570176 Project: yara Fuzzing Engine: libFuzzer Fuzz Target: rulesfuzzer Job Type: libfuzzermsanyara Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
PT-2025-51231
NetSupport Manager 14.12.0001 contains an unauthenticated SQL injection vulnerability in its Connectivity Server/Gateway HTTPS request handling. The server evaluates request URIs using an unsanitized SQLite query against the FileLinks table in gateway.db. By injecting SQL through the LinkName/URI...
The vulnerability of the drm/tegra component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the drm/tegra component in the Linux operating system is related to an unvalidated return value. Exploiting this vulnerability allows a perpetrator to cause service failures...
The vulnerability of the iwlwifi component in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the iwlwifi component in Linux operating systems is related to an unvalidated return value. Exploiting this vulnerability allows a attacker to cause a service failure...
The vulnerability in the driver/i2c/buses/i2c-qup.c component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the drivers/i2c/busses/i2c-qup.c component of the Linux operating system’s kernel is related to an unvalidated return value. Exploiting this vulnerability allows an attacker to cause a service failure...
The vulnerability of the Linux operating system’s kernel, related to improper checking of the return value of a function, allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s kernel is related to improper checking of the return value of a function. Exploiting this vulnerability allows an attacker to cause service failures...
The vulnerability of the net/sched component in the Linux operating system’s kernel, which allows a hacker to trigger a service failure
The vulnerability of the net/sched component in the Linux operating system’s kernel is related to an unvalidated return value. Exploiting this vulnerability allows an attacker to cause a service failure...
The vulnerability of the qla4xxx_get_ep_fwdb() function in the Linux kernel driver allows a hacker to induce a service failure.
The vulnerability of the qla4xxxgetepfwdb function in the qla4xxx driver for Linux kernel involves insufficient checking of return values. Exploiting this vulnerability allows attackers to cause system failures...
WeKan 安全漏洞
WeKan is a Kanban application from the WeKan open source. A security vulnerability exists in WeKan versions 18.15 and earlier, which stems from an unauthenticated attacker being able to update the board's sort value, potentially leading to arbitrary reordering...
CVE-2025-65779
An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Unauthenticated attackers can update a board's "sort" value Boards.allow returns true without verifying userId, allowing arbitrary reordering of boards...
PT-2025-51218
Name of the Vulnerable Software and Affected Versions Wekan versions prior to 18.16 Description An issue exists in Wekan, an open-source kanban board system, where unauthenticated attackers can modify a board's "sort" value. The Boards.allow function does not verify the user ID, enabling...
The vulnerability of the fs/nfsd/nfs4state.c component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the fs/nfsd/nfs4state.c component in the Linux operating system is related to an unvalidated return value. Exploiting this vulnerability allows an attacker to cause a service failure...
CVE-2025-65779
An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Unauthenticated attackers can update a board's "sort" value Boards.allow returns true without verifying userId, allowing arbitrary reordering of boards...
graphicsmagick:enhance_fuzzer: Use-of-uninitialized-value in TIFFReadDirectory
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6173944400117760 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: enhancefuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...
CVE-2025-14667
A security vulnerability has been detected in itsourcecode COVID Tracking System 1.0. The impacted element is an unknown function of the file /admin/?page=systeminfo. Such manipulation of the argument metavalue leads to sql injection. The attack may be performed from remote. The exploit has been...
kimageformats:kimgio_heif_fuzzer: Use-of-uninitialized-value in put_weighted_pred_8_fallback
Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=4652958001463296 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioheiffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...