7961 matches found
CVE-2022-50557
In the Linux kernel, the following vulnerability has been resolved: pinctrl: thunderbay: fix possible memory leak in thunderbaybuildfunctions The thunderbayaddfunctions will free memory of thunderbayfuncs when everything is ok, but thunderbayfuncs will not be freed when thunderbayaddfunctions...
CVE-2022-50557
CVE-2022-50557 concerns the Linux kernel pinctrl thunderbay path, where thunderbay_add_functions() could leak memory if thunderbay_add_functions() failed to free thunderbay_funcs. The root cause was that thunderbay_funcs was freed only on success; on failure it remained allocated. A patch fixes t...
CVE-2022-50557 pinctrl: thunderbay: fix possible memory leak in thunderbay_build_functions()
In the Linux kernel, the following vulnerability has been resolved: pinctrl: thunderbay: fix possible memory leak in thunderbaybuildfunctions The thunderbayaddfunctions will free memory of thunderbayfuncs when everything is ok, but thunderbayfuncs will not be freed when thunderbayaddfunctions...
CVE-2022-50557 pinctrl: thunderbay: fix possible memory leak in thunderbay_build_functions()
In the Linux kernel, the following vulnerability has been resolved: pinctrl: thunderbay: fix possible memory leak in thunderbaybuildfunctions The thunderbayaddfunctions will free memory of thunderbayfuncs when everything is ok, but thunderbayfuncs will not be freed when thunderbayaddfunctions...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper memory freeing in the thunderbaybuildfunctions function, which could lead to a memory leak...
The vulnerability of Fortinet FortiOS operating systems, related to errors in representing specified functions, allows attackers to execute arbitrary commands.
The vulnerability of Fortinet FortiOS operating systems is related to errors in representing specified functions. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987677)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987677 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: sdio: fix possible resource leaks in some error paths If sdioaddfunc or sdioinitfunc fails,...
Malware Using Variable Functions and Cookies For Obfuscation
📢 Calling all Vulnerability Researchers and Bug Bounty Hunters!📢 🚀 Operation: Maximum Impact Challenge ! Now through November 10, 2025, earn 2X bounty rewards forall in-scope submissions in software with at least 5,000 active installs and fewer than 5 million active installs. Bounties up to $31,2...
ABB ALS-mini-s4 IP和ABB ALS-mini-s8 IP 访问控制错误漏洞
The ABB ALS-mini-s4 IP and ABB ALS-mini-s8 IP are both intelligent load management controllers from ABB Switzerland. An access control error vulnerability exists in the ABB ALS-mini-s4 IP and ABB ALS-mini-s8 IP that stems from a lack of authentication for critical functions...
The vulnerability of microprogrammed communication module software for SIMATIC CP and SIPLUS systems lies in the lack of authentication for critical functions, allowing attackers to gain full access to configuration information.
The vulnerability of the microprogramming software for SIMATIC CP and SIPLUS communication modules is related to the absence of authentication for critical functions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full access to configuration information...
The vulnerability of the Radiflow iSAP Smart Collector, a platform for data collection, monitoring, and analysis in industrial automation and industrial security systems, lies in the lack of authentication for critical functions. This allows attackers to gain access to all system settings, modify configurations, and execute arbitrary code.
The vulnerability of the data collection, monitoring, and analysis platform in industrial automation and industrial security systems, Radiflow iSAP Smart Collector, is related to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to gain acce...
XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet (used for an XSLT transformation), because XSLT extension functions are enabled.
...
Feedback Lunch: Deep Feedback Codes for Wiretap Channels
We consider reversely-degraded wiretap channels, for which the secrecy capacity is zero if there is no channel feedback. This work focuses on a seeded modular code design for the Gaussian wiretap channel with channel output feedback, combining universal hash functions for security and learned...
CVE-2025-0274
HCL BigFix Modern Client Management MCM 3.3 and earlier is affected by improper access control. Unauthorized users can access a small subset of endpoint actions, potentially allowing access to select internal functions...
CVE-2025-0275
HCL BigFix Mobile 3.3 and earlier is affected by improper access control. Unauthorized users can access a small subset of endpoint actions, potentially allowing access to select internal functions...
CVE-2025-6892
CVE-2025-6892, -6893, and -6894 relate to Moxa network security devices. The connected Red Hat advisories describe a set of API/authorization flaws in Moxa appliances: (CVE-2025-6892) an Incorrect Authorization flaw in API authentication that allows unauthorized privileged operations after login;...
CVE-2024-31573
XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet used for an XSLT transformation, because XSLT extension functions are enabled...
CVE-2024-31573: Incorrect Resource Transfer Between Spheres
XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet used for an XSLT transformation, because XSLT extension functions are enabled...
Unspecified Vulnerability in Rockwell Automation Comms-1783-NATR
Rockwell Automation Comms-1783-NATR is an industrial Ethernet address translation device from Rockwell Automation. A security vulnerability exists in the Rockwell Automation Comms-1783-NATR that stems from a lack of authentication checks for critical functions and can be exploited by an attacker ...
