205 matches found
anon-vec lacks sufficient checks in public API
The following functions in the anon-vec crate are unsound due to insufficient checks on their arguments:: - AnonVec::getref - AnonVec::getmut - AnonVec::removeget The crate was built as a learning project and is not being maintained...
PT-2025-25491 · Crates.Io · Anon-Vec
The following functions in the anon-vec crate are unsound due to insufficient checks on their arguments:: - AnonVec::get ref - AnonVec::get mut - AnonVec::remove get The crate was built as a learning project and is not being maintained...
CVE-2007-6460
Multiple cross-site scripting XSS vulnerabilities in Anon Proxy Server before 0.101 allow remote attackers to inject arbitrary web script or HTML via the URI, which is later displayed by 1 log.php or 2 logerror.php, a different vulnerability than CVE-2007-6459...
RUSTSEC-2025-0039 Lack of sufficient checks in public API
The following functions in the anon-vec crate are unsound due to insufficient checks on their arguments:: - AnonVec::getref - AnonVec::getmut - AnonVec::removeget The crate was built as a learning project and is not being maintained...
Lack of sufficient checks in public API
The following functions in the anon-vec crate are unsound due to insufficient checks on their arguments:: - AnonVec::getref - AnonVec::getmut - AnonVec::removeget The crate was built as a learning project and is not being maintained...
PT-2025-23486 · Crates.Io · Anon-Vec
The following functions in the anon-vec crate are unsound due to insufficient checks on their arguments:: - AnonVec::get ref - AnonVec::get mut - AnonVec::remove get The crate was built as a learning project and is not being maintained...
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF bsc1237918. CVE-2022-49465: blk-throttle: Set BIOTHROTTLED when bio has been throttled bsc1238919...
AZL-69518 CVE-2025-21907 affecting package kernel 6.6.126.1-1
In the Linux kernel, the following vulnerability has been resolved: mm: memory-failure: update ttu flag inside unmappoisonedfolio Patch series "mm: memoryfailure: unmap poisoned folio during migrate properly", v3. Fix two bugs during folio migration if the folio is poisoned. This patch of 3: Comm...
SUSE CVE-2022-49469
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix anondev leak in createsubvol When btrfsqgroupinherit, btrfsalloctreeblock, or btrfsinsertroot fail in createsubvol, we return without freeing anondev. Reorganize the error handling in createsubvol to fix this...
AZL-68681 CVE-2022-49469 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix anondev leak in createsubvol When btrfsqgroupinherit, btrfsalloctreeblock, or btrfsinsertroot fail in createsubvol, we return without freeing anondev. Reorganize the error handling in createsubvol to fix this...
CVE-2024-53111 mm/mremap: fix address wraparound in move_page_tables()
In the Linux kernel, the following vulnerability has been resolved: mm/mremap: fix address wraparound in movepagetables On 32-bit platforms, it is possible for the expression len + oldaddr include include include define ADDR1 void0x60000000 define ADDR2 void0x10000000 define SIZE 0x50000000uL int...
Malicious code in anaconda-anon-usage (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 681441a370f0819063d937bf24e1c9fdff7fd9dc5201da7e2c577d8a547fff51 The package is designed to exfiltrate basic data, like hostname and OS details, as well as collect information about the stacktrace it's imported from. ---...
CVE-2024-40950
A vulnerability was found in the Linux kernel related to "mm: hugememory: fix misused mappinglargefoliosupport for anon folios". This issue was resolved by adding checks to prevent the incorrect use of mappinglargefoliosupport for anonymous folios. The flaw caused split failures and warnings duri...
DEBIAN-CVE-2024-40913
In the Linux kernel, the following vulnerability has been resolved: cachefiles: defer exposing anonfd until after copytouser succeeds After installing the anonymous fd, we can now see it in userland and close it. However, at this point we may not have gotten the reference count of the cache, but ...
CVE-2024-40950
In the Linux kernel, the following vulnerability has been resolved: mm: hugememory: fix misused mappinglargefoliosupport for anon folios When I did a large folios split test, a WARNING " 5059.122759 T166 Cannot split file folio to non-0 order" was triggered. But the test cases are only for anonmo...
CVE-2024-40950 mm: huge_memory: fix misused mapping_large_folio_support() for anon folios
In the Linux kernel, the following vulnerability has been resolved: mm: hugememory: fix misused mappinglargefoliosupport for anon folios When I did a large folios split test, a WARNING " 5059.122759 T166 Cannot split file folio to non-0 order" was triggered. But the test cases are only for anonmo...
CVE-2024-40950 mm: huge_memory: fix misused mapping_large_folio_support() for anon folios
In the Linux kernel, the following vulnerability has been resolved: mm: hugememory: fix misused mappinglargefoliosupport for anon folios When I did a large folios split test, a WARNING " 5059.122759 T166 Cannot split file folio to non-0 order" was triggered. But the test cases are only for anonmo...
Malicious code in sap-anon (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 710673a02482ab1c70dd35a40525478055d2f61cc3c9ec55a813044c6cca0315 The OpenSSF Package Analysis project identified 'sap-anon' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-7548 Malicious code in sap-anon (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 710673a02482ab1c70dd35a40525478055d2f61cc3c9ec55a813044c6cca0315 The OpenSSF Package Analysis project identified 'sap-anon' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
