27960 matches found
PT-2025-7915
Name of the Vulnerable Software and Affected Versions NVIDIA CUDA toolkit affected versions not specified Description The issue is related to the nvdisasm binary in the NVIDIA CUDA toolkit, where passing a malformed ELF file could cause an out-of-bounds read. This might lead to a partial denial o...
Linux kernel udf DoS
The vulnerability of the udf component in the Linux operating system’s kernel is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel UDF Uninitialized Resource DoS
The vulnerability of the udf component in the Linux operating system’s kernel is related to the use of an uninitialized resource in the udfrename function. Exploiting this vulnerability can allow a attacker to cause a service failure...
GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow
...
[SECURITY] Fedora 41 Update: libheif-1.19.5-3.fc41
libheif is an ISO/IEC 23008-12:2017 HEIF and AVIF AV1 Image File Format file format decoder and encoder...
[SECURITY] Fedora 40 Update: libheif-1.19.5-3.fc40
libheif is an ISO/IEC 23008-12:2017 HEIF and AVIF AV1 Image File Format file format decoder and encoder...
CLSA-2025-1739525872 Fix CVE(s): CVE-2024-53104
CVE-url: https://ubuntu.com/security/CVE-2024-53104 - media: uvcvideo: Skip parsing frames of type UVCVSUNDEFINED in uvcparseformat...
CVE-2025-25184
A flaw was found in the rubygem-rack package. When a user provides the authorization credentials via Rack::Auth::Basic, if successful, the username is placed in env'REMOTEUSER' and later used by Rack::CommonLogger for logging purposes. The issue occurs when a server intentionally or unintentional...
jinja2: Jinja has a sandbox breakout through indirect reference to format method
A flaw was found in the Jinja package. In affected versions of Jinja, an oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to...
[SECURITY] Fedora 40 Update: rust-eif_build-0.2.1-3.fc40
This CLI tool provides a low level path to assemble an enclave image format EIF file used in AWS Nitro Enclaves...
curl: Format string vulnerability, curl_msnprintf() function
Summary: A vulnerability has been identified in the curl library’s formatted output functions specifically in curlmsnprintf and its related functions. When a malicious attacker-controlled format string containing the %hn conversion specifier is passed, the function incorrectly attempts to write t...
jinja2: Jinja has a sandbox breakout through indirect reference to format method
A flaw was found in the Jinja package. In affected versions of Jinja, an oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to...
SUSE CVE-2025-1153
A vulnerability classified as problematic was found in GNU Binutils 2.43/2.44. Affected by this vulnerability is the function bfdsetformat of the file format.c. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The...
OpenSearch Dashboards Reports Security Vulnerabilities
OpenSearch Dashboards Reports is an OpenSearch open source application. It is used to export and automate PNG, PDF and CSV reports in OpenSearch Dashboard. A security vulnerability exists in OpenSearch Dashboards Reports version 2.19, which stems from the Dashboards Reports module containing a...
CVE-2023-40721
A use of externally-controlled format string vulnerability CWE-134 vulnerability in Fortinet allows a privileged attacker to execute arbitrary code or commands via specially crafted requests...
CVE-2023-40721
A use of externally-controlled format string vulnerability CWE-134 vulnerability in Fortinet allows a privileged attacker to execute arbitrary code or commands via specially crafted requests...
Astra Linux – vulnerability in hdf5
Versions 1.14.2 through 1.14.3 of HDF5 contain a buffer overflow in H5Olinfodecode, which corrupts the instruction pointer and can lead to denial of service or arbitrary code execution...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: binfmtflat: Fix corruption when not offsetting data start Commit 04d82a6d0881 “binfmtflat: allow not offsetting data start” introduced a RISC-V-specific variant of the FLAT format that does not allocate any space for the obsolete...
Astra Linux – vulnerability in hdf5
A buffer overflow in H5Olayoutencode within H5Olayout.c in the HDF HDF5 through version 1.10.4 library enables attackers to trigger a denial of service by using a specially crafted HDF5 file. This issue occurred during the repacking of an HDF5 file; it is also known as “Invalid write of size 2.”...
Astra Linux – vulnerability in hdf5
The HDF5 Library up to version 1.14.3 contains a heap-based buffer overflow in H5Olayoutencode within H5Olayout.c, leading to corruption of the instruction pointer...