Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2026/06/09 6:36 p.m.11 views

Net::IMAP: Denial of Service via incomplete raw argument validation

Summary Several Net::IMAP commands accept a raw string argument which is only validated to prevent CRLF injection and then sent verbatim. If this string is derived from user-controlled input, an attacker can force the next command to be absorbed as a continuation of the first command. This will...

9.8CVSS5.7AI score0.00429EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2026/06/09 6:36 p.m.5 views

GHSA-C4FP-CXRR-MJ66 Net::IMAP: Denial of Service via incomplete raw argument validation

Summary Several Net::IMAP commands accept a raw string argument which is only validated to prevent CRLF injection and then sent verbatim. If this string is derived from user-controlled input, an attacker can force the next command to be absorbed as a continuation of the first command. This will...

2.1CVSS5.7AI score0.00239EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.2 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper handling of the runningreq variable, which could cause the internal suspend command to hang...

5.8AI score0.00203EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-2611

Malicious code in bioql PyPI...

5.5CVSS7.3AI score0.00199EPSS
Exploits0References5
OSV
OSV
added 2025/01/21 12:18 p.m.8 views

CVE-2025-21662 net/mlx5: Fix variable not being completed when function returns

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix variable not being completed when function returns When cmdallocindex, fails cmdworkhandler needs to complete ent-slotted before returning early. Otherwise the task which issued the command may hang: mlx5core...

5.5CVSS6.2AI score0.00199EPSS
Exploits0References8
Cvelist
Cvelist
added 2025/01/21 12:18 p.m.18 views

CVE-2025-21662 net/mlx5: Fix variable not being completed when function returns

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix variable not being completed when function returns When cmdallocindex, fails cmdworkhandler needs to complete ent-slotted before returning early. Otherwise the task which issued the command may hang: mlx5core...

0.00199EPSS
Exploits0References4
Rows per page
Query Builder