4767 matches found
CLSA-2025-1755008582 dmidecode: Fix of CVE-2023-30630
CVE-2023-30630: do not let --dump-bin overwrite an existing file...
CLSA-2025-1755004236 dmidecode: Fix of CVE-2023-30630
CVE-2023-30630: do not let --dump-bin overwrite an existing file...
Linux Distros Unpatched Vulnerability : CVE-2025-37918
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: avoid NULL pointer dereference in skbdequeue A NULL pointer dereference ca...
Use After Free
Overview Affected versions of this package are vulnerable to Use After Free via the jpcdecdump and jpcdectilefini functions in the libjasper/jpc/jpcdec.c file. An attacker can execute arbitrary code or cause a denial of service by triggering access to memory after it has been freed. Remediation A...
AZL-66198 CVE-2025-8837 affecting package jasper for versions less than 2.0.32-5
A vulnerability was identified in JasPer up to 4.2.5. This affects the function jpcdecdump of the file src/libjasper/jpc/jpcdec.c of the component JPEG2000 File Handler. The manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public...
CVE-2025-8837
A vulnerability was identified in JasPer up to 4.2.5. This affects the function jpcdecdump of the file src/libjasper/jpc/jpcdec.c of the component JPEG2000 File Handler. The manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public...
CVE-2025-8837 JasPer JPEG2000 File jpc_dec.c jpc_dec_dump use after free
A vulnerability was identified in JasPer up to 4.2.5. This affects the function jpcdecdump of the file src/libjasper/jpc/jpcdec.c of the component JPEG2000 File Handler. The manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public...
PT-2025-32530
Name of the Vulnerable Software and Affected Versions: JasPer versions up to 4.2.5 Description: A use-after-free vulnerability exists in JasPer up to version 4.2.5. The issue affects the jpc dec dump function within the JPEG2000 File Handler component, located in the file src/libjasper/jpc/jpc...
PostgreSQL -- vulnerabilities
PostgreSQL project reports: Tighten security checks in planner estimation functions. Prevent pgdump scripts from being used to attack the user running the restore. Convert newlines to spaces in names included in comments in pgdump output...
Linux Distros Unpatched Vulnerability : CVE-2025-37981
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Use iskdumpkernel to check for kdump The smartpqi driver checks the...
CVE-2025-7020 BYD DiLink OS Incorrect encryption Implementation of system log dumps
An incorrect encryption implementation vulnerability exists in the system log dump feature of BYD's DiLink 3.0 OS e.g. in the model ATTO3. An attacker with physical access to the vehicle can bypass the encryption of log dumps on the In-Vehicle Infotainment IVI unit's storage. This allows the...
BYD DiLink 安全漏洞
BYD DiLink is an intelligent Internet connection system from China's BYD BYD. A security vulnerability exists in BYD DiLink 3.0 OS, which stems from improper implementation of encryption for the system log dump function, which could lead to sensitive data leakage...
PT-2025-32437 · Byd · Byd Dilink 3.0 Os
Name of the Vulnerable Software and Affected Versions: BYD DiLink 3.0 OS affected versions not specified Description: An incorrect encryption implementation exists in the system log dump feature. An attacker with physical access to the vehicle can bypass the encryption of log dumps on the...
CVE-2025-7020: Reliance on Security Through Obscurity
An incorrect encryption implementation vulnerability exists in the system log dump feature of BYD's DiLink 3.0 OS e.g. in the model ATTO3. An attacker with physical access to the vehicle can bypass the encryption of log dumps on the In-Vehicle Infotainment IVI unit's storage. This allows the...
Linux Distros Unpatched Vulnerability : CVE-2024-38590
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Modify the print level of CQE error Too much print may lead to a panic in kernel...
Linux Distros Unpatched Vulnerability : CVE-2025-38006
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: mctp: Don't access ifaindex when missing In mctpdumpaddrinfo, ifaindex can be used to filter interfaces, but only when the struct ifaddrmsg is provided...
Linux Distros Unpatched Vulnerability : CVE-2021-47518
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: fix potential NULL pointer deref in nfcgenldumpsesdone The done netlink callback nfcgenldumpsesdone should check if received argument is non-NULL, because...
Linux Distros Unpatched Vulnerability : CVE-2022-50178
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtw89: 8852a: rfk: fix div 0 exception The DPK is a kind of RF calibration whose algorithm is to fine tune parameters and calibrate, and check the result...
