Lucene search
+L

2597 matches found

OSV
OSV
•added 2025/02/26 7:01 a.m.•14 views

DEBIAN-CVE-2022-49551

In the Linux kernel, the following vulnerability has been resolved: usb: isp1760: Fix out-of-bounds array access Running the driver through kasan gives an interesting splat: BUG: KASAN: global-out-of-bounds in isp1760register+0x180/0x70c Read of size 20 at addr f1db2e64 by task swapper/0/1...

7.1CVSS6.1AI score0.00268EPSS
SaveExploits0References1
OSV
OSV
•added 2025/02/26 7:01 a.m.•16 views

DEBIAN-CVE-2022-49233

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Call dcstreamrelease for remove link enc assignment Why A porting error resulted in the stream assignment for the link being retained without being released - a memory leak. How Fix the porting error by adding ba...

5.5CVSS5.6AI score0.00222EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/26 7:00 a.m.•25 views

CVE-2022-49203

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix double free during GPU reset on DC streams Why The issue only occurs during the GPU reset code path. We first backup the current state prior to commiting 0 streams internally from DM to DC. This state backup...

7.8CVSS0.00234EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/02/26 1:55 a.m.•47 views

CVE-2022-49233 drm/amd/display: Call dc_stream_release for remove link enc assignment

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Call dcstreamrelease for remove link enc assignment Why A porting error resulted in the stream assignment for the link being retained without being released - a memory leak. How Fix the porting error by adding ba...

0.00222EPSS
SaveExploits0References2
CVE
CVE
•added 2025/02/26 1:55 a.m.•106 views

CVE-2022-49233

The CVE-2022-49233 issue is in the Linux kernel DRM/AMD display path where a porting error left a stream assignment for a link encoder unreleased, causing a memory leak. The documented fix reintroduces the intended dc_stream_release() call to release the stream as part of the original patch. The ...

5.5CVSS6.5AI score0.00222EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2025/02/26 1:55 a.m.•25 views

CVE-2022-49203 drm/amd/display: Fix double free during GPU reset on DC streams

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix double free during GPU reset on DC streams Why The issue only occurs during the GPU reset code path. We first backup the current state prior to commiting 0 streams internally from DM to DC. This state backup...

7.8CVSS5.4AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/26 12:00 a.m.•2 views

CVE-2022-49203: Double Free

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix double free during GPU reset on DC streams Why The issue only occurs during the GPU reset code path. We first backup the current state prior to commiting 0 streams internally from DM to DC. This state backup...

7.8CVSS5.8AI score0.00234EPSS
SaveExploits0References4
AstraLinux
AstraLinux
•added 2025/02/06 4:28 p.m.•10 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix double free during GPU reset on DC streams Why The issue only occurs during the GPU reset code path. We first backup the current state prior to commiting 0 streams internally from DM to DC. This state backup...

5.5CVSS6.6AI score0.00234EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 8:15 a.m.•15 views

CVE-2024-47975

Improper access control validation in firmware of some Solidigm DC Products may allow an attacker with physical access to gain unauthorized access or an attacker with local access to potentially enable denial of service...

7CVSS6.8AI score0.00199EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/02/05 12:02 a.m.•14 views

CVE-2024-4879

ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow applied an update to hosted...

9.8CVSS9.5AI score0.99976EPSS
SaveExploits9References1
OSV
OSV
•added 2025/02/03 4:44 p.m.•4 views

MAL-2025-793 Malicious code in adobe-dcapi-web2 (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSV
OSV
•added 2025/02/03 4:44 p.m.•10 views

MAL-2025-792 Malicious code in adobe-dcapi-web (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0References2
OSV
OSV
•added 2025/01/31 10:15 p.m.•13 views

CVE-2024-53356

Weak JWT Secret vulnerabilitiy in EasyVirt DCScope = 8.6.0 and CO2Scope = 1.3.0 allows remote attackers to generate JWT for privilege escalation. The HMAC secret used for generating tokens is hardcoded as "somerandomaccesstoken". A weak HMAC secret poses a risk because attackers can use the...

9.8CVSS5.8AI score0.00663EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/01/31 12:00 a.m.•16 views

EasyVirt DC Scope和EasyVirt CO2 Scope 安全漏洞

EasyVirt DC Scope and EasyVirt CO2 Scope are both products of the French company EasyVirt.EasyVirt DC Scope is a monitoring and management solution for VMware Virtualization VMware.EasyVirt CO2 Scope is a real-time monitoring and control solution for IT services, virtual machines and servers in...

9.8CVSS6.5AI score0.00663EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/01/31 12:00 a.m.•16 views

EasyVirt DC Scope和EasyVirt CO2 Scope 安全漏洞

EasyVirt DC Scope and EasyVirt CO2 Scope are both products of the French company EasyVirt.EasyVirt DC Scope is a monitoring and management solution for VMware Virtualization VMware.EasyVirt CO2 Scope is a real-time monitoring and control solution for IT services, virtual machines and servers in...

7.5CVSS6.6AI score0.00511EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/01/31 12:00 a.m.•15 views

EasyVirt DC Scope和EasyVirt CO2 Scope 安全漏洞

EasyVirt DC Scope and EasyVirt CO2 Scope are both products of the French company EasyVirt.EasyVirt DC Scope is a monitoring and management solution for VMware Virtualization VMware.EasyVirt CO2 Scope is a real-time monitoring and control solution for IT services, virtual machines and servers in...

9.1CVSS8.4AI score0.00582EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/01/31 12:00 a.m.•17 views

EasyVirt DC Scope和EasyVirt CO2 Scope 安全漏洞

EasyVirt DC Scope and EasyVirt CO2 Scope are both products of the French company EasyVirt.EasyVirt DC Scope is a monitoring and management solution for VMware Virtualization VMware.EasyVirt CO2 Scope is a real-time monitoring and control solution for IT services, virtual machines and servers in...

9.8CVSS7.7AI score0.01109EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/01/31 12:00 a.m.•16 views

EasyVirt DC Scope和EasyVirt CO2 Scope 安全漏洞

EasyVirt DC Scope and EasyVirt CO2 Scope are both products of the French company EasyVirt.EasyVirt DC Scope is a monitoring and management solution for VMware Virtualization VMware.EasyVirt CO2 Scope is a real-time monitoring and control solution for IT services, virtual machines and servers in...

8.8CVSS6.4AI score0.0055EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/24 12:00 a.m.•3 views

CVE-2025-24706: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Stored XSS.This issue affects MultiVendorX: from n/a through = 4.2.13...

6.5CVSS5.8AI score0.00368EPSS
SaveExploits0References1
OSV
OSV
•added 2025/01/23 1:39 p.m.•10 views

MAL-2025-363 Malicious code in self-bots-dc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d57d5a05bea1dda9fbc71d4016a47c33f2a89150eef13a97d587db0329a7e7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
Rows per page
Query Builder