MiracleLinux 9 : java-1.8.0-openjdk-1.8.0.382.b05-2.el9.ML.1 (AXSA:2023-6265:17)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6265:17 advisory. OpenJDK: improper handling of slash characters in URI-to-path conversion 8305312 CVE-2023-22049 OpenJDK: array indexing integer overflow issue 83044...

ROS-20260119-7309

A vulnerability in the net/sched/schsfq.c component of the Linux operating system kernel is related to unchecked array indexing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

CVE-2025-71086

Technical details for CVE-2025-71086 are not publicly available in the provided documents. Monitor for updates from official advisories; the initial description mentions a Linux kernel fix in net rose_kill_by_device but no product/version specifics are provided here.

ROS-20260113-7390

A vulnerability in the drivers/us module ucsiccgsynccontrol of the Linux kernel is related to unchecked array indexing. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protected information...

ROS-20260112-7307

A vulnerability in the smuv130updatepcieparameters function of the drivers/gpu/drm/amd/pm/swsmu/smu13/smuv130.c module, a driver to support the Direct Rendering Infrastructure DRI of AMD graphics cards in the Linux operating system kernel, is related to unchecked array indexing. Exploitation of t...

The vulnerability in the driver/mailbox/zynqmp-ipi-mailbox.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/mailbox/zynqmp-ipi-mailbox.c module of the Linux operating system is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the dcn401_stream_encoder_create() function in the drivers/gpu/drm/amd/display/dc/resource/dcn401/dcn401_resource.c kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dcn401streamencodercreate function in the drivers/gpu/drm/amd/display/dc/resource/dcn401/dcn401resource.c file of the Linux kernel is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Apache Guacamole software for remote management of client machines, related to unvalidated array indexing, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Apache Guacamole, a software for remote administration of client machines, is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

ROS-20251216-7308

Vulnerability in guacamole related to unchecked array indexing. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...

ROS-20251216-7309

Vulnerability in guacamole-server related to unchecked array indexing. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...

The vulnerability of the net/sched component in the Linux operating system allows a hacker to compromise data integrity and cause service failures.

The vulnerability of the net/sched component in the Linux operating system’s kernel is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...

PT-2025-49309

Name of the Vulnerable Software and Affected Versions BACnet Protocol Stack versions prior to 1.5.0.rc2 Description The BACnet Protocol Stack library contains flaws in the npdu is expected reply function within src/bacnet/npdu.c. This function does not properly validate the existence of Applicati...

The vulnerability of the vLLM library for working with large language models involves unverified array indexing, which allows attackers to trigger service interruptions.

The vulnerability of the vLLM library for working with large language models is related to unverified array indexing. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Vulnerability of the dvb_vb2_querybuf() function in the drivers/media/dvb-core/dvb_vb2.c module – This is a driver for supporting multimedia devices in the Linux operating system. It allows an attacker to compromise the integrity of protected information.

Vulnerability of the dvbvb2querybuf function in the drivers/media/dvb-core/dvbvb2.c module – The Linux kernel’s multimedia device support driver has a vulnerability related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the integrity of protecte...

The vulnerability of embedded software developed by Qualcomm, related to unverified array indexing, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of microprogramming software in embedded Qualcomm chips is related to unverified array indexing. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the btf_repeat_fields() function in the kernel/bpf/btf.c module, which supports the Linux operating system’s BPF interpreter, allows a hacker to trigger a service denial.

The vulnerability of the btfrepeatfields function in the kernel/bpf/btf.c module, which is part of the Linux operating system’s BPF interpreter support, involves unvalidated array indexing. Exploiting this vulnerability could allow an attacker to trigger a service failure...

JLSEC-2025-101 FFMPEG version 4.1 contains a CWE-129: Improper Validation of Array Index vulnerability in...

FFMPEG version 4.1 contains a CWE-129: Improper Validation of Array Index vulnerability in libavcodec/cbsav1.c that can result in Denial of service. This attack appears to be exploitable via specially crafted AV1 file has to be provided as input. This vulnerability appears to have been fixed in...

EUVD-2024-0177

Malicious code in bioql PyPI...

EUVD-2023-47185

Malicious code in bioql PyPI...

The vulnerability of the clk component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the clk component in the Linux operating system’s kernel is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to cause a service failure...