EUVD-2026-26156

A flaw has been found in elinsky execution-system-mcp 0.1.0. The impacted element is the function getcontextfilepath of the file src/executionsystemmcp/server.py of the component addaction Tool. This manipulation of the argument context causes path traversal. The attack can be initiated remotely...

PT-2023-9351

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential null pointer dereference in the drm/amdgpu component of the Linux kernel. This could allow an attacker to cause a denial of service. The amdgpu ras ge...

PT-2018-15608

Name of the Vulnerable Software and Affected Versions libpulse-binding versions prior to 1.2.1 Description The issue is related to a use-after-free problem in the libpulse-binding crate for Rust. Specifically, the get format info and get context methods of Stream objects can cause this issue due ...

PT-2018-15609

Name of the Vulnerable Software and Affected Versions libpulse-binding versions prior to 1.2.1 Description The issue is related to use-after-free problems with objects returned by the get format info and get context methods of Stream objects. These objects were mistakenly constructed without...

CVE-2013-6395

Cross-site scripting XSS vulnerability in header.php in Ganglia Web 3.5.8 and 3.5.10 allows remote attackers to inject arbitrary web script or HTML via the hostregex parameter to the default URI, which is processed by getcontext.php...

CVE-2007-6465

Multiple cross-site scripting XSS vulnerabilities in ganglia-web in Ganglia before 3.0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 c and 2 h parameters to a web/hostgmetrics.php; the 3 G, 4 me, 5 x, 6 n, 7 v, 8 l, 9 vl, and 10 st parameters to b web/graph.php; and th...