38415 matches found
wasm2c-tableflip
Escapada de sandbox wasm2c: el módulo invitado ejecuta un comando de shell en el host Lee el blog: trustsig.eu/blog wasmrtallocatefuncreftable en wasm2c/wasm-rt-impl-tableops.inc establece table-size a partir del número de elementos declarado por el módulo y luego ignora el resultado de calloc...
Dropbear_CVE-2013-4434
DropbearCVE-2013-4434 dropbearCVE-2013-4434.sh Este script verifica CVE-2013-4434 https://vulners.com/cve/CVE-2013-4434. El servidor SSH Dropbear anterior a 2013.59 genera mensajes de error para un intento de inicio de sesión fallido con diferentes retardos de tiempo dependiendo de si la cuenta d...
CVE-2026-103489
In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was possible...
CVE-2026-103489
Versions of JetBrains YouTrack prior to 2026.2.19422 are vulnerable to an HTML injection flaw. This vulnerability exists within the VCS command failure notifications . No specific exploit information or direct remediation steps are provided in the documentation, though the issue is associated wit...
CVE-2026-103489
In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was possible...
CVE-2026-31431-Analysis
CVE-2026-31431-Analysis Informe de Análisis Técnico: Explotación de Fallo de Aislamiento en el Kernel Linux CVE-2026-31431...
SUSE CVE-2026-97912
In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure SRAM size is 0 on mapping failure On a mapping failure of the SRAM, the SRAM size is left as non-zero. The probe will succeed as the error return is not checked since having SRAM is not a hard requirement. T...
ROS-20261001-73-0056
The vulnerability of the SOGo collaborative software server lies in the lack of protective measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...
ROS-20261001-73-0031
The vulnerability in Xen is related to the lack of checking for division by zero. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261001-73-0029
The vulnerability in the p11-kit is related to an uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20261001-73-0011
The vulnerability in gstreamer1-plugins-base is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20261001-73-0017
The vulnerability in perl-YAML-Syck is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20261001-73-0033
The vulnerability in Xen is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
AlmaLinux 9.6 [TuxCare] Security Update: hostapd / hostapd-logwatch (ALMALINUX9.6:CLSA-2026:1790066310)
The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790066310 advisory. - hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker ...
AlmaLinux 9.2 [TuxCare] Security Update: hostapd / hostapd-logwatch (ALMALINUX9.2:CLSA-2026:1786108949)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786108949 advisory. - hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker ...
Rocky Linux 9 [CIQ] Security Update: keylime / keylime-base / keylime-registrar / keylime-selinux / etc (crlsa-2024_1139)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20241139 advisory. keylime: Attestation failure when the quote's signature does not validate CVE-2023-3674 Tenable has extracted the preceding description block directly from the CIQ...
AlmaLinux 9.2 [TuxCare] Security Update: delve (ALMALINUX9.2:CLSA-2026:1773313831)
The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1773313831 advisory. - During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake...
Rocky Linux 8 [CIQ] Security Update: libtiff / libtiff-debuginfo / libtiff-debugsource / libtiff-devel / etc Multiple Vulnerabilities (crlsa-2021_4241)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20214241 advisory. libtiff: Integer overflow in tifgetimage.c CVE-2020-35523 libtiff: Heap-based buffer overflow in TIFF2PDF tool CVE-2020-35524 libtiff: Memory allocation...