16221 matches found
CVE-2025-59952 minio-java Client XML Tag is Vulnerable to Value Substitution
MinIO Java SDK is a Simple Storage Service aka S3 client to perform bucket and object operations to any Amazon S3 compatible object storage service. In minio-java versions prior to 8.6.0, XML tag values containing references to system properties or environment variables were automatically...
CVE-2025-59952 minio-java Client XML Tag is Vulnerable to Value Substitution
MinIO Java SDK is a Simple Storage Service aka S3 client to perform bucket and object operations to any Amazon S3 compatible object storage service. In minio-java versions prior to 8.6.0, XML tag values containing references to system properties or environment variables were automatically...
Open Redirection
googlesignin is vulnerable to Open Redirection. The vulnerability is due to open redirect due to the proceedto session value accepting protocol-relative URLs which can be set via a malicious form submission, allowing an attacker to redirect users to another origin...
SUSE-SU-2025:03423-1 Security update for apache2-mod_security2
This update for apache2-modsecurity2 fixes the following issues: - CVE-2025-54571: Fixed insufficient return value handling on modsecurity leads to xss and source code disclosure bsc1247674...
IBM License Metric Tool 访问控制错误漏洞
The IBM License Metric Tool is a free tool from International Business Machines IBM that helps IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs. An Access Control Error vulnerability exists in IBM License Metric Tool...
PT-2025-39874
Name of the Vulnerable Software and Affected Versions Medical Informatics Engineering Enterprise Health versions prior to 2025-03-14 Description A CSV injection issue exists that permits a remote, authenticated attacker to inject macros into downloadable CSV files. The issue was resolved on March...
llvm:clang-fuzzer: Use-of-uninitialized-value in clang::Parser::ParseOptionalCXXScopeSpecifier
Detailed Report: https://oss-fuzz.com/testcase?key=5126446348828672 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clang::Parser::ParseOptionalCXXScopeSpecifier...
matio:matio_fuzzer: Use-of-uninitialized-value in H5T__bit_find
Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=4640034911485952 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzermsanmatio Platform Id: linux Crash Type: Use-of-uninitialized-val...
The vulnerability of the npcm-video.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the npcm-video.c component in the Linux operating system’s kernel is related to an unvalidated return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the virtiofs component in the Linux operating system, which allows a hacker to trigger a service failure
The vulnerability of the virtiofs component in Linux operating systems is related to improper checking of the returned value from the function. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the tegra-se-aes.c and tegra-se-hash.c components of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the tegra-se-aes.c and tegra-se-hash.c components of the Linux operating system’s kernel is related to an unvalidated return value. Exploiting this vulnerability could allow a attacker to cause a service failure...
The vulnerability of the blkdev_read_iter() function in the block/fops.c component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the blkdevreaditer function in the block/fops.c component of the Linux operating system’s kernel is related to an unvalidated return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the dequeue_entities() function in the kernel/sched/fair.c component of the Linux operating system allows a attacker to trigger a service failure.
The vulnerability of the dequeueentities function in the kernel/sched/fair.c component of the Linux operating system is related to an unvalidated return value. Exploiting this vulnerability could allow a attacker to cause a service failure...
The vulnerability of the inftlcore.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the inftlcore.c component in the Linux operating system’s kernel is related to an unvalidated return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the x86/mm kernel component of the Linux operating system, which allows a hacker to cause a service failure
The vulnerability of the x86/mm kernel component of the Linux operating system is related to an unvalidated return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
quickjs:fuzz_compile: Use-of-uninitialized-value in JS_DefineProperty
Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=4551913271263232 Project: quickjs Fuzzing Engine: libFuzzer Fuzz Target: fuzzcompile Job Type: libfuzzermsanquickjs Platform Id: linux Crash Type:...
CVE-2025-60018
glib-networking's OpenSSL backend fails to properly check the return value of a call to BIOwrite, resulting in an out of bounds read...
CVE-2025-60019
glib-networking's OpenSSL backend fails to properly check the return value of memory allocation routines. An out of memory condition could potentially result in writing to an invalid memory location...
