CVE-2026-46587

Inyección de cabecera CCB en camel-couchbase — Reproducción CVE-2026-46587 Este proyecto demuestra una inyección en las cabeceras del mensaje en el componente camel-couchbase de Apache Camel, registrada como CVE-2026-46587. El componente lee varias cabeceras del Exchange para controlar su...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: bna: Adjust the ‘name’ buffer size of bnatcb and bnaccb structures. To ensure there is enough space to store all possible arguments for sprintf. Currently, the ‘name’ size is 16 characters, but the first '%s' specifier may...

CVE-2026-22165 GPU DDK - UAF read of GLES3Context::psDrawParams and GLES3Context::psMode and UAF read/write of RMJob::apsCCBs

A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger a write UAF crash in the GPU GLES user-space shared library. On certain platforms, when the process executing graphics workload has system privileges this could enable further exploits on the...

bna: adjust 'name' buf size of bna_tcb and bna_ccb structures

...

DEBIAN-CVE-2022-49217

In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix abort all task initialization In pm80xxsendabortall, the nelem field of the ccb used is not initialized to 0. This missing initialization sometimes lead to the task completion path seeing the ccb with a non-zero...

Malicious code in ccb-app-ui-service (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11325 Malicious code in ccb-app-ui-service (npm)

--- -= Per source details. Do not edit below this line.=-...

AZL-51983 CVE-2024-43839 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: bna: adjust 'name' buf size of bnatcb and bnaccb structures To have enough space to write all possible sprintf args. Currently 'name' size is 16, but the first '%s' specifier may already need at least 16 characters, since...

DEBIAN-CVE-2024-43839

In the Linux kernel, the following vulnerability has been resolved: bna: adjust 'name' buf size of bnatcb and bnaccb structures To have enough space to write all possible sprintf args. Currently 'name' size is 16, but the first '%s' specifier may already need at least 16 characters, since...

UBUNTU-CVE-2024-43839

In the Linux kernel, the following vulnerability has been resolved: bna: adjust 'name' buf size of bnatcb and bnaccb structures To have enough space to write all possible sprintf args. Currently 'name' size is 16, but the first '%s' specifier may already need at least 16 characters, since...

DEBIAN-CVE-2022-48791

In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free for aborted TMF sastask Currently a use-after-free may occur if a TMF sastask is aborted before we handle the IO completion in mpisspcompletion. The abort occurs due to timeout. When the timeout...

PT-2025-8145

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the pm8001 send abort all function, where the n elem field of the ccb used is not initialized to 0. This...

PT-2022-7647

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue may occur in the Linux kernel when a sas task is aborted by the upper layer before handling the I/O completion in mpi ssp completion or mpi sata completion. This...

PT-2019-11170

Name of the Vulnerable Software and Affected Versions: Android versions 7.0 through 9 Description: The issue is related to a missing bounds check in the mca ccb hdl rsp function of mca cact.cc, which could lead to a possible out of bounds read. This may result in remote information disclosure...

PT-2019-9675

Name of the Vulnerable Software and Affected Versions Vignette Content Management version 6 Description The issue allows for remote access to administrator privileges by discovering the admin password in the "vgn/ccb/user/mgmt/user/edit/0,1628,0,00.html?uid=admin" HTML source code, and then...

PT-2018-1622

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9.0 Description The issue is related to a possible out of bounds read in the mca ccb hdl req function of mca cact.cc. This could lead to remote information disclosure over Bluetooth with no additional execution...

CVE-2017-9571

The CVE-2017-9571 entry concerns the Citizens Community Bank ccb-mobile-banking/id610030469 iOS app 3.0.1, which does not verify X.509 certificates from SSL servers. This allows a man-in-the-middle attacker to spoof HTTPS servers and obtain sensitive information via a crafted certificate. Documen...

PT-2017-19031

Name of the Vulnerable Software and Affected Versions The Citizens Community Bank TN ccb-mobile-banking/id610030469 app version 3.0.1 for iOS Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the app does not...

CVE-2017-9571: Improper Certificate Validation

The Citizens Community Bank TN ccb-mobile-banking/id610030469 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...