11266 matches found
CVE-2024-57857 RDMA/siw: Remove direct link to net_device
In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Remove direct link to netdevice Do not manage a per device direct link to netdevice. Rely on associated ibdevices netdevice management, not doubling the effort locally. A badly managed local link to netdevice was causin...
PT-2025-4349
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.126 Linux kernel versions prior to 6.6.73 Linux kernel versions prior to 6.12.10 Description The issue is related to the imx8mp blk ctrl remove function in the Linux kernel, which can cause an out-of-bounds...
CVE-2024-55891 Information Disclosure via Exception Handling/Logger in TYPO3
TYPO3 is a free and open source Content Management Framework. It has been discovered that the install tool password has been logged as plaintext in case the password hashing mechanism used for the password was incorrect. Users are advised to update to TYPO3 versions 13.4.3 ELTS which fixes the...
TYPO3 Information Disclosure via Exception Handling/Logger
Problem It has been discovered that the install tool password has been logged as plaintext in case the password hashing mechanism used for the password was incorrect. Solution Update to TYPO3 versions 13.4.3 LTS that fixes the problem described. Credits Thanks to TYPO3 core & security team member...
Phoenix SecureCore code-related vulnerabilities
Phoenix SecureCore is a computer based input/output system from Phoenix Contact Phoenix of Germany. A code issue vulnerability exists in Phoenix SecureCore that arises from an improperly checked exception or anomaly that allows input data manipulation...
Huawei HarmonyOS Device Node Access Module Memory Misreference Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A memory misreference vulnerability exists in the Huawei HarmonyOS device node access module, which can be exploited by an attacker to cause a device service...
rdf4j:ParserFuzzer: Security exception in org.eclipse.rdf4j.query.algebra.Join.getBindingNames
Detailed Report: https://oss-fuzz.com/testcase?key=4665786794311680 Project: rdf4j Fuzzing Engine: libFuzzer Fuzz Target: ParserFuzzer Job Type: libfuzzerasanrdf4j Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.eclipse.rdf4j.query.algebra.Join.getBindingNames...
apache-poi:POIHDGFFuzzer: Security exception in org.apache.poi.util.LZWDecompresser.decompress
Detailed Report: https://oss-fuzz.com/testcase?key=5558567284834304 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIHDGFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.apache.poi.util.LZWDecompresser.decompre...
jflex:JflexFuzzer: Security exception in jflex.core.NFA.insertNFA
Project: https://github.com/jflex-de/jflex.git Detailed Report: https://oss-fuzz.com/testcase?key=4941850045120512 Project: jflex Fuzzing Engine: libFuzzer Fuzz Target: JflexFuzzer Job Type: libfuzzerasanjflex Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
CVE-2024-56434
UAF vulnerability in the device node access module Impact: Successful exploitation of this vulnerability may cause service exceptions of the device...
VulnCheck KEV: CVE-2024-52875
Several vulnerabilities are present in GFI KerioControl due to improper sanitization of the 'dest' GET parameter used to generate a 'Location' HTTP header. The affected endpoints include /nonauth/addCertException.cs, /nonauth/guestConfirm.cs, and /nonauth/expiration.cs. Exploitation could allow f...
Huawei HarmonyOS security vulnerabilities
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A memory misreference vulnerability exists in the Huawei HarmonyOS device node access module, which can be exploited by an attacker to cause a device service...
CVE-2024-56434: Use After Free
UAF vulnerability in the device node access module Impact: Successful exploitation of this vulnerability may cause service exceptions of the device...
SUSE CVE-2024-56644
In the Linux kernel, the following vulnerability has been resolved: net/ipv6: release expired exception dst cached in socket Dst objects get leaked in ip6negativeadvice when this function is executed for an expired IPv6 route located in the exception table. There are several conditions that must ...
OSV-2025-13 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=386587113 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.io.BufferedWriter.write java.base/java.io.Writer.write...
PT-2025-8772
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue occurs when the SCM driver fails during the probe, leaving the global ' scm' variable assigned. This can cause external...
checker-framework:UtilCheckerFuzzer: Security exception in org.checkerframework.checker.i18nformatter.util.I18nFormatUtil.formatParameterCa
Detailed Report: https://oss-fuzz.com/testcase?key=4980379991212032 Project: checker-framework Fuzzing Engine: libFuzzer Fuzz Target: UtilCheckerFuzzer Job Type: libfuzzerasanchecker-framework Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
CVE-2024-20152
In wlan STA driver, there is a possible reachable assertion due to improper exception handling. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00389047 / ALPS09136505; Issue...
CVE-2024-20152
In wlan STA driver, there is a possible reachable assertion due to improper exception handling. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00389047 / ALPS09136505; Issue...
CVE-2024-20152
A security vulnerability exists in the wlan STA driver of MediaTek Chipsets due to improper exception handling, which allows for a reachable assertion . A malicious actor who has already obtained System privilege can exploit this issue to cause a local denial of service . No user interaction is r...