32602 matches found
CLSA-2026-1772815097 Fix of 72 CVEs
CVE-2025-38699 - scsi: bfa: Double-free fix CVE-2025-38699 CVE-2025-38697 - jfs: upper bound check of tree index in dbAllocAG CVE-2025-38697 CVE-2025-39823 - KVM: x86: use arrayindexnospec with indices that come from guest CVE-2025-39823 CVE-2025-39689 - ftrace: Also allocate and copy hash for...
CVE-2026-28802
Authlib is a Python library which builds OAuth and OpenID Connect servers. From version 1.6.5 to before version 1.6.7, previous tests involving passing a malicious JWT containing alg: none and an empty signature was passing the signature verification step without any changes to the application co...
CVE-2025-69653
A crafted JavaScript input can trigger an internal assertion failure in QuickJS release 2025-09-13, fixed in commit 1dbba8a88eaa40d15a8a9b70bb1a0b8fb5b552e6 2025-12-11, in file gcdecrefchild in quickjs.c, when executed with the qjs interpreter using the -m option. This leads to an abort SIGABRT...
The vulnerability of the machine_kexec() function in the arch/x86/kernel/machine_kexec_64.c module, which is part of the Linux operating system’s x86 kernel support, allows a hacker to cause a service failure.
The vulnerability of the machinekexec function in the arch/x86/kernel/machinekexec64.c module of the Linux kernel support for x86 processors is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of Cisco TelePresence CE and RoomOS software, related to improper validation of certain types of input data, allows a intruder to trigger a service failure.
The vulnerability of Cisco TelePresence CE and RoomOS software is related to improper validation of certain types of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the Vim text editor, related to reading beyond the buffer in memory, allows a hacker to trigger a service failure.
The vulnerability of the Vim text editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the Vim text editor, related to buffer overflow in dynamic memory, allows attackers to cause a service failure.
The vulnerability of the Vim text editor is related to overflowing the buffer in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
CVE-2025-69653
A crafted JavaScript input can trigger an internal assertion failure in QuickJS release 2025-09-13, fixed in commit 1dbba8a88eaa40d15a8a9b70bb1a0b8fb5b552e6 2025-12-11, in file gcdecrefchild in quickjs.c, when executed with the qjs interpreter using the -m option. This leads to an abort SIGABRT...
CVE-2025-69654
A crafted JavaScript input executed with the QuickJS release 2025-09-13, fixed in commit fcd33c1afa7b3028531f53cd1190a3877454f6b3 2025-12-11,qjs interpreter using the -m option and a low memory limit can cause an out-of-memory condition followed by an assertion failure in JSFreeRuntime...
CVE-2025-69653
A crafted JavaScript input can trigger an internal assertion failure in QuickJS release 2025-09-13, fixed in commit 1dbba8a88eaa40d15a8a9b70bb1a0b8fb5b552e6 2025-12-11, in file gcdecrefchild in quickjs.c, when executed with the qjs interpreter using the -m option. This leads to an abort SIGABRT...
CVE-2025-69654
A crafted JavaScript input executed with the QuickJS release 2025-09-13, fixed in commit fcd33c1afa7b3028531f53cd1190a3877454f6b3 2025-12-11,qjs interpreter using the -m option and a low memory limit can cause an out-of-memory condition followed by an assertion failure in JSFreeRuntime...
QuickJS 安全漏洞
QuickJS is a small and embeddable JavaScript engine developed by the QuickJS open-source project. The QuickJS 2025-09-13 version contains a security vulnerability. This vulnerability stems from a garbage collection internal assertion failure when processing specially crafted JavaScript inputs,...
Vulnerability of the qat_dh_compute_value() function in the drivers/crypto/qat/qat_common/qat_asym_algs.c module – a driver for the Linux kernel’s cryptographic accelerator, allowing a hacker to cause a service failure.
Vulnerability of the qatdhcomputevalue function in the drivers/crypto/qat/qatcommon/qatasymalgs.c module – The driver for the Linux kernel’s cryptographic accelerator is vulnerable to integer overflow or cyclic shift attacks. Exploiting this vulnerability could allow an attacker to cause a system...
The vulnerability of the Vim text editor, related to reading beyond the buffer in memory, allows a hacker to cause a service failure.
The vulnerability of the Vim text editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the pci_dev_lock() function in the drivers/pci/pci.c module of the Linux operating system’s device support driver allows a hacker to cause a service failure.
The vulnerability of the pcidevlock function in the drivers/pci/pci.c module of the Linux operating system’s device support driver for PCI devices is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the `get_handler_for_db()` function in the `security/integrity/platform_certs/keyring_handler.h` module of the Linux kernel’s security/integrity subsystem allows a attacker to trigger a service failure.
The vulnerability of the gethandlerfordb function in the security/integrity/platformcerts/keyringhandler.h module of the Linux kernel’s security/integrity subsystem is related to improper cleaning or release of resources. Exploiting this vulnerability could allow an attacker to cause a service...
PT-2026-23748
Name of the Vulnerable Software and Affected Versions QuickJS versions 2025-09-13 through 2025-12-11 Description A specially crafted JavaScript input, when executed with the qjs interpreter using the -m option and a limited memory allocation, can lead to an out-of-memory condition. This is follow...
The vulnerability of ClamBC, a byte-code interpreter in the ClamAV antivirus software, allows a perpetrator to execute arbitrary code or cause a service failure.
The vulnerability of the byte-code interpreter in the ClamAV antivirus software package ClamBC is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause system failures...
The vulnerability of the ip6_find_1stfragopt() function in the include/net/ipv6.h module of the Linux kernel allows a hacker to induce a service failure.
The vulnerability of the ip6find1stfragopt function in the include/net/ipv6.h module of the Linux kernel is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the `tcp_packets_in_flight()` function in the `include/net/tcp.h` module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the tcppacketsinflight function in the include/net/tcp.h module of the Linux kernel relates to the disclosure of confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...