15940 matches found
Exploit for Deserialization of Untrusted Data in Redhat Jboss_Enterprise_Application_Platform
Many critical industries banking, healthcare, and manufacturing...
PT-2026-8108
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0-rc4-next-20260108-00024-g2202f4d30aa8 Description The Linux kernel contains a flaw related to a race condition in the serial driver. Specifically, the tty-port may not be properly set, leading to a potenti...
Sensitive Information Exposure
@actual-app/sync-server is vulnerable to sensitive Information Exposure. The vulnerability is due to logging parsed API responses to STDOUT using console.log/console.debug, which allows an attacker with access to application logs to obtain sensitive data such as bearer tokens, bank account detail...
SUSE CVE-2023-54198
In the Linux kernel, the following vulnerability has been resolved: tty: fix out-of-bounds access in ttydriverlookuptty When specifying an invalid console= device like console=tty3270, ttydriverlookuptty returns the tty struct without checking whether index is a valid number. To reproduce:...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993070)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993070 advisory. In the Linux kernel, the following vulnerability has been resolved: vt: Clear selection before changing the font When changing the console font with ioctlKDFONTOP th...
Linux Distros Unpatched Vulnerability : CVE-2023-54198
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tty: fix out-of-bounds access in ttydriverlookuptty When specifying an invalid console= device like console=tty3270, ttydriverlookuptty returns the tty struct...
EUVD-2023-60443
In the Linux kernel, the following vulnerability has been resolved: tty: fix out-of-bounds access in ttydriverlookuptty When specifying an invalid console= device like console=tty3270, ttydriverlookuptty returns the tty struct without checking whether index is a valid number. To reproduce:...
CVE-2023-54198
In the Linux kernel, the following vulnerability has been resolved: tty: fix out-of-bounds access in ttydriverlookuptty When specifying an invalid console= device like console=tty3270, ttydriverlookuptty returns the tty struct without checking whether index is a valid number. To reproduce:...
CVE-2023-54198
In the Linux kernel, the following vulnerability has been resolved: tty: fix out-of-bounds access in ttydriverlookuptty When specifying an invalid console= device like console=tty3270, ttydriverlookuptty returns the tty struct without checking whether index is a valid number. To reproduce:...
UBUNTU-CVE-2023-54198
In the Linux kernel, the following vulnerability has been resolved: tty: fix out-of-bounds access in ttydriverlookuptty When specifying an invalid console= device like console=tty3270, ttydriverlookuptty returns the tty struct without checking whether index is a valid number. To reproduce:...
CVE-2023-54198
CVE-2023-54198 affects the Linux kernel tty subsystem: tty_driver_lookup_tty() can return a tty object for an invalid index when an invalid console= is given (e.g., console=tty3270), leading to a NULL-pointer dereference in tty_open. The issue was fixed in the kernel (tty: fix out-of-bounds acces...
CVE-2023-54198 tty: fix out-of-bounds access in tty_driver_lookup_tty()
In the Linux kernel, the following vulnerability has been resolved: tty: fix out-of-bounds access in ttydriverlookuptty When specifying an invalid console= device like console=tty3270, ttydriverlookuptty returns the tty struct without checking whether index is a valid number. To reproduce:...
CVE-2023-54198 tty: fix out-of-bounds access in tty_driver_lookup_tty()
In the Linux kernel, the following vulnerability has been resolved: tty: fix out-of-bounds access in ttydriverlookuptty When specifying an invalid console= device like console=tty3270, ttydriverlookuptty returns the tty struct without checking whether index is a valid number. To reproduce:...
CVE-2023-54198: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: tty: fix out-of-bounds access in ttydriverlookuptty When specifying an invalid console= device like console=tty3270, ttydriverlookuptty returns the tty struct without checking whether index is a valid number. To reproduce:...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992560)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992560 advisory. In the Linux kernel, the following vulnerability has been resolved: vt: Clear selection before changing the font When changing the console font with ioctlKDFONTOP th...
[SECURITY] Fedora 43 Update: gdu-5.32.0-1.fc43
Fast disk usage analyzer with console interface written in Go...
[SECURITY] Fedora 42 Update: gdu-5.32.0-1.fc42
Fast disk usage analyzer with console interface written in Go...
The vulnerability of the administrator console of the Zimbra Collaboration Suite email management system allows a hacker to trigger a service failure.
The vulnerability of the administrator console of the Zimbra Collaboration Suite email management system involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted GET request...
The vulnerability of the IBM Hardware Management Console lies in its lack of measures to protect the structure of the web page, allowing attackers to disclose protected information.
The vulnerability of the IBM Hardware Management Console is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...
Security Bulletin: TSSC/IMC is affected to an Acceptance of Extraneous Untrusted Data With Trusted Data
Summary TSSC/IMC is affected to an Acceptance of Extraneous Untrusted Data With Trusted Data. A patch was released to update the bind package. Vulnerability Details CVEID:CVE-2025-40778 DESCRIPTION: Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an...