Lucene search
+L

313 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 9:44 p.m.•27 views

CVE-2022-45926

An issue was discovered in OpenText Content Suite Platform 22.1 16.2.19.1803. The endpoint notify.localizeEmailTemplate allows a low-privilege user to evaluate webreports...

8.8CVSS7.9AI score0.16972EPSS
SaveExploits3References1
RedHat Linux
RedHat Linux
•added 2025/05/13 8:28 a.m.•19 views

kernel: drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported

A flaw was found in the Linux kernel's AMD GPU driver. A failure to properly handle error returns during ACPI Advanced Configuration and Power Interface object evaluation can result in a NULL pointer dereference when specific interface features are unsupported. A local user could exploit this fla...

5.5CVSS6.2AI score0.00258EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2025/05/07 2:19 a.m.•18 views

SUSE CVE-2022-49855

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix memory leak in ipcpciereadbioscfg ipcpciereadbioscfg is using the acpievaluatedsm to obtain the wwan power state configuration from BIOS but is not freeing the acpiobject. The acpievaluatedsm returned...

5.5CVSS5.7AI score0.00199EPSS
SaveExploits0References3
NVD
NVD
•added 2025/05/01 3:16 p.m.•32 views

CVE-2022-49855

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix memory leak in ipcpciereadbioscfg ipcpciereadbioscfg is using the acpievaluatedsm to obtain the wwan power state configuration from BIOS but is not freeing the acpiobject. The acpievaluatedsm returned...

5.5CVSS0.00199EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2025/02/21 7:15 p.m.•31 views

CVE-2020-19248

SQL Injection vulnerability in PbootCMS 1.4.1 in parsing if statements in templates, resulting in a malicious user's ability to contaminate template content by searching for page contamination URLs, thus triggering vulnerabilities when the program uses eval statements to parse templates...

5.1CVSS6AI score0.00261EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/01/24 12:00 a.m.•18 views

PT-2025-40594

Name of the Vulnerable Software and Affected Versions Redis versions prior to 8.2.2 Redis versions prior to 8.0.4 Redis versions prior to 7.4.6 Redis versions prior to 7.2.11 Redis versions prior to 6.2.20 Description A use-after-free memory corruption issue exists in the Lua scripting engine of...

9.9CVSS8.4AI score0.83161EPSS
SaveExploits14References491
osv_oesa
osv_oesa
•added 2024/11/22 11:07 a.m.•26 views

OESA-2024-2440 busybox security update

BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system. Security Fixes: A...

5.5CVSS6.5AI score0.00433EPSS
SaveExploits2References3
SUSE CVE
SUSE CVE
•added 2024/11/20 3:49 a.m.•16 views

SUSE CVE-2024-53060

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported acpievaluateobject may return AENOTFOUND failure, which would result in dereferencing buffer.pointer obj while being NULL. Although this case may be unrealisti...

5.5CVSS5.8AI score0.00258EPSS
SaveExploits0References18
osv_azl
osv_azl
•added 2024/11/19 6:15 p.m.•30 views

AZL-53981 CVE-2024-53060 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported acpievaluateobject may return AENOTFOUND failure, which would result in dereferencing buffer.pointer obj while being NULL. Although this case may be unrealisti...

5.5CVSS5.8AI score0.00258EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/11/19 6:15 p.m.•35 views

AZL-53967 CVE-2024-53060 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported acpievaluateobject may return AENOTFOUND failure, which would result in dereferencing buffer.pointer obj while being NULL. Although this case may be unrealisti...

5.5CVSS5.8AI score0.00258EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2024/11/19 6:15 p.m.•9 views

DEBIAN-CVE-2024-53060

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported acpievaluateobject may return AENOTFOUND failure, which would result in dereferencing buffer.pointer obj while being NULL. Although this case may be unrealisti...

5.5CVSS5.9AI score0.00258EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2024/11/19 6:15 p.m.•22 views

UBUNTU-CVE-2024-53060

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported acpievaluateobject may return AENOTFOUND failure, which would result in dereferencing buffer.pointer obj while being NULL. Although this case may be unrealisti...

5.5CVSS5.9AI score0.00258EPSS
SaveExploits0References17
Vulnrichment
Vulnrichment
•added 2024/11/19 5:22 p.m.•11 views

CVE-2024-53060 drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported acpievaluateobject may return AENOTFOUND failure, which would result in dereferencing buffer.pointer obj while being NULL. Although this case may be unrealisti...

5.8AI score0.00258EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
•added 2024/10/04 12:00 a.m.•18 views

Babel Compiler Code Execution

The vulnerability of the path.evaluate or path.evaluateTruthy function of the compiler for writing Babel JavaScript code is related to improper comparison. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

8.8CVSS8AI score0.00525EPSS
SaveExploits0References10Affected Software12
Positive Technologies
Positive Technologies
•added 2024/08/27 12:00 a.m.•25 views

PT-2024-31400 · Nixos · Hydra

Name of the Vulnerable Software and Affected Versions: Hydra affected versions not specified Description: Hydra is a Continuous Integration service for Nix-based projects. It is possible to trigger evaluations in Hydra without any authentication. Depending on the size of evaluations, this can...

7.5CVSS5.8AI score0.00619EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2024/08/06 12:00 a.m.•29 views

PT-2024-38416 · Datagear · Datagear

Name of the Vulnerable Software and Affected Versions: DataGear versions up to 5.0.0 Description: A critical issue has been found, affecting the evaluateVariableExpression function of the ConversionSqlParamValueMapper.java file in the Data Schema Page component. This issue leads to improper...

8.8CVSS6.2AI score0.0059EPSS
SaveExploits1References7
Snyk
Snyk
•added 2024/06/19 12:15 p.m.•5 views

Arbitrary Code Execution

Overview langchain-experimental is a package that holds experimental LangChain code, intended for research and experimental uses. Affected versions of this package are vulnerable to Arbitrary Code Execution when retrieving values from the database, the code will attempt to call 'eval' on all...

8.5CVSS6.4AI score0.01893EPSS
SaveExploits1References2
Fedora
Fedora
•added 2024/05/26 1:29 a.m.•18 views

[SECURITY] Fedora 40 Update: rust-uu_test-0.0.23-3.fc40

test uutils evaluate comparison and file type expressions...

7.3AI score
SaveExploits0
CNNVD
CNNVD
•added 2024/01/19 12:00 a.m.•19 views

Pillow Security Breach

Pillow is a Python based image processing library. A security vulnerability exists in Pillow 10.1.0 and earlier versions, which can be exploited to execute arbitrary code via the environment parameter in PIL.ImageMath.eval...

8.1CVSS7.8AI score0.01703EPSS
SaveExploits0References11
BDU FSTEC
BDU FSTEC
•added 2023/12/01 12:00 a.m.•26 views

BusyBox evaluate DoS

The vulnerability of the evaluate function in the BusyBox command-line utility for UNIX systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS7AI score0.00433EPSS
SaveExploits1References5Affected Software2
Rows per page
Query Builder