Lucene search
K

56 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.1 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memleak in getfilestreaminfo Fix memleak in getfilestreaminfo...

5.5CVSS6.6AI score0.00031EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/04/22 12:0 a.m.1 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013437)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013437 advisory. In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memleak in getfilestreaminfo Fix memleak in getfilestreaminfo Tenable has extracted th...

5.5CVSS5.7AI score0.00031EPSS
Exploits0References4
OSV
OSV
added 2026/04/20 9:16 p.m.0 views

UBUNTU-CVE-2026-5928

Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially...

7.5CVSS5.9AI score0.00068EPSS
Exploits1References3
UbuntuCve
UbuntuCve
added 2026/04/20 9:16 p.m.0 views

CVE-2026-5928

Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially...

7.5CVSS5.8AI score0.00068EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2026/02/16 12:0 a.m.3 views

PT-2026-8353

A vulnerability was determined in JingDong JD Cloud Box AX6600 up to 4.5.1.r4533. This impacts the function cast streen of the file /jdcapi of the component jdcweb rpc. Executing a manipulation of the argument File can lead to Remote Privilege Escalation. The attack may be performed from remote...

6.5CVSS5.2AI score0.00165EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2026/01/09 8:46 a.m.1 views

CVE-2025-68705

RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.78, RustFS contains a path traversal vulnerability in the /rustfs/rpc/readfilestream endpoint. This issue has been patched in version 1.0.0-alpha.79...

9.3CVSS6.8AI score0.00072EPSS
Exploits3References1
NVD
NVD
added 2026/01/07 9:15 p.m.4 views

CVE-2025-68705

RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.78, RustFS contains a path traversal vulnerability in the /rustfs/rpc/readfilestream endpoint. This issue has been patched in version 1.0.0-alpha.79...

9.8CVSS0.00072EPSS
Exploits3References2
OSV
OSV
added 2026/01/07 8:31 p.m.2 views

CVE-2025-68705 RustFS Path Traversal Vulnerability

RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.78, RustFS contains a path traversal vulnerability in the /rustfs/rpc/readfilestream endpoint. This issue has been patched in version 1.0.0-alpha.79...

9.3CVSS6.7AI score0.00072EPSS
Exploits3References4
CVE
CVE
added 2026/01/07 8:31 p.m.10 views

CVE-2025-68705

RustFS exposes a path traversal vulnerability in the /rustfs/rpc/read_file_stream endpoint affecting versions 1.0.0-alpha.13 through 1.0.0-alpha.78; the issue stems from insufficient path validation via volume_dir.join(Path::new(&path)) without canonicalization or boundary checks, allowing paths ...

9.8CVSS6.5AI score0.00072EPSS
Exploits3References2Affected Software1
Github Security Blog
Github Security Blog
added 2026/01/07 6:15 p.m.8 views

RustFS Path Traversal Vulnerability

RustFS Path Traversal Vulnerability Vulnerability Details - CVE ID: - Severity: Critical CVSS estimated 9.9 - Impact: Arbitrary File Read/Write - Component: /rustfs/rpc/readfilestream endpoint - Root Cause: Insufficient path validation in crates/ecstore/src/disk/local.rs:1791 Vulnerable Code rust...

9.8CVSS7.2AI score0.00072EPSS
Exploits3References4Affected Software1
CNNVD
CNNVD
added 2026/01/07 12:0 a.m.2 views

rustfs 路径遍历漏洞

rustfs is a high-performance object storage system in the RustFS open source. A path traversal vulnerability exists in rustfs versions 1.0.0-alpha.13 through 1.0.0-alpha.78, which stems from a path traversal in the /rustfs/rpc/readfilestream endpoint...

9.8CVSS6.5AI score0.00072EPSS
Exploits3References2
Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.3 views

PT-2026-1916

Name of the Vulnerable Software and Affected Versions RustFS versions 1.0.0-alpha.13 through 1.0.0-alpha.78 Description RustFS is a distributed object storage system built in Rust. Versions 1.0.0-alpha.13 through 1.0.0-alpha.78 contain a path traversal vulnerability in the /rustfs/rpc/read file...

9.3CVSS6.7AI score0.00072EPSS
Exploits3References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2006-6040

Malware in sbrugna...

4.9CVSS6.2AI score0.00064EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-49954

Malicious code in bioql PyPI...

5.5CVSS5.4AI score0.00143EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2022-41847

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Bento4 1.6.0-639. A memory leak exists in AP4StdcFileByteStream::CreateAP4FileByteStream, char const, AP4FileByteStream::Mode,...

5.5CVSS6.1AI score0.00262EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2022-43295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XPDF v4.04 was discovered to contain a stack overflow via the function FileStream::copy at xpdf/Stream.cc:795. CVE-2022-43295 Note that Nessus relies on the...

5.5CVSS6.8AI score0.00081EPSS
Exploits0References2
OSV
OSV
added 2025/08/19 12:15 p.m.3 views

CVE-2025-9136

A flaw has been found in libretro RetroArch 1.18.0/1.19.0/1.20.0. This affects the function filestreamvscanf of the file libretro-common/streams/filestream.c. This manipulation causes out-of-bounds read. The attack needs to be launched locally. Upgrading to version 1.21.0 mitigates this issue. It...

7.8CVSS6.9AI score
Exploits0References7
Cvelist
Cvelist
added 2025/06/09 7:49 p.m.14 views

CVE-2025-5918 Libarchive: reading past eof may be triggered for piped file streams

A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memo...

3.9CVSS0.00113EPSS
Exploits0References4
OSV
OSV
added 2024/05/24 3:15 p.m.1 views

DEBIAN-CVE-2021-47568

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memleak in getfilestreaminfo Fix memleak in getfilestreaminfo...

5.5CVSS5.4AI score0.00031EPSS
Exploits0References1
OSV
OSV
added 2024/05/24 3:15 p.m.0 views

UBUNTU-CVE-2021-47568

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memleak in getfilestreaminfo Fix memleak in getfilestreaminfo...

5.5CVSS5.7AI score0.00031EPSS
Exploits0References5
Rows per page
Query Builder