Lucene search
+L

22 matches found

Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•28 views

PT-2026-91889

A vulnerability was found in GPAC up to f1219cde. Impacted is the function gf node get name and id of the file scenegraph/base scenegraph.c. The manipulation results in use after free. It is possible to launch the attack remotely. The exploit has been made public and could be used. Upgrading to...

7.5CVSS5.9AI score0.00511EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•4 views

PT-2026-96496

In the Linux kernel, the following vulnerability has been resolved: ceph: bound copied dentry name length in NFS export get name ceph get name copies the MDS-supplied name into the caller's NAME MAX-sized buffer with memcpyname, rinfo-dname, rinfo-dname len and then writes namerinfo-dname len = 0...

9.8CVSS6AI score0.00457EPSS
SaveExploits0References2
OSV
OSV
•added 2026/07/20 2:59 p.m.•14 views

CVE-2026-26199 Buffer underflow in `H5Iget_name `/`H5G_get_name` if size is zero

HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If H5Igetname is invoked on a group id with 0 for the size parameter, it will underflow when trying to place a null terminator in the buffer. This can occur if H5Igetname is invoked in a way...

5.9CVSS5.3AI score
SaveExploits0References4
CVE
CVE
•added 2026/06/01 12:00 a.m.•43 views

CVE-2025-70099

The lwext4 embedded library (version 1.0.0 ) contains a NULL pointer dereference vulnerability within the ext4_dir_en_get_name_len function in include/ext4_dir.h. This flaw occurs because the code fails to validate the directory entry pointer before accessing the name_len field during directory i...

7.5CVSS5.5AI score0.00384EPSS
SaveExploits0References4
Snyk
Snyk
•added 2026/03/08 10:32 a.m.•4 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the sftpextensionsgetname or sftpextensionsgetdata functions. An attacker can cause the application to read memory outside the intended buffer by supplying a crafted argument, potentially resulting in application...

7.5CVSS6.4AI score0.012EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/10 12:00 a.m.•3 views

PT-2025-54850

Уязвимость функции ext4 dir en get name len библиотеки lwext4, связанная с разыменованием нулевого указателя при обработке повреждённых записей каталога EXT4. Эксплуатация уязвимости, может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

4.9CVSS5.8AI score
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2025/09/14 12:00 a.m.•12 views

The vulnerability of the get_name() function in the interface.c file of the Net-tools utility package for the Linux operating system allows a hacker to execute arbitrary code and cause service failure.

The vulnerability of the getname function in the interface.c file of the Net-tools utility package for the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code and...

6.6CVSS7.5AI score0.00195EPSS
SaveExploits0References9Affected Software7
OSV
OSV
•added 2025/05/14 11:15 p.m.•16 views

AZL-61888 CVE-2025-46836 affecting package net-tools for versions less than 2.10-4

net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities like ifconfig from the net-tools package do not properly validate the structure of /proc files when...

6.6CVSS7.1AI score0.00195EPSS
SaveExploits0References1
OSV
OSV
•added 2025/05/14 11:15 p.m.•11 views

UBUNTU-CVE-2025-46836

net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities like ifconfig from the net-tools package do not properly validate the structure of /proc files when...

6.6CVSS7.4AI score0.00195EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2025/01/11 12:00 a.m.•15 views

The vulnerability of the uof_get_name() function in the QAT_4xxx driver (driver/crypto/intel/qat/qat_4xxx/adf_4xxx_hw_data.c) on Linux operating systems allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the uofgetname function in the QAT4xxx driver driver/crypto/intel/qat/qat4xxx/adf4xxxhwdata.c on Linux operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access t...

5.3CVSS7.1AI score0.00258EPSS
SaveExploits0References17Affected Software3
Vulnrichment
Vulnrichment
•added 2024/12/24 11:29 a.m.•17 views

CVE-2024-53163 crypto: qat/qat_420xx - fix off by one in uof_get_name()

In the Linux kernel, the following vulnerability has been resolved: crypto: qat/qat420xx - fix off by one in uofgetname This is called from uofgetname420xx where "numobjs" is the ARRAYSIZE of fwobjs. The needs to be = to prevent an out of bounds access...

7.5AI score0.00249EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/12/24 12:00 a.m.•18 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the uofgetname function of qat420xx in the crypto module incorrectly checking for array boundaries, leading ...

5.5CVSS6.6AI score0.00249EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/10/21 12:00 a.m.•2 views

PT-2024-33900

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: The issue concerns a change to non-blocking allocation in ntfs d hash within the Linux kernel. Specifically, d hash is performed under "rcu-walk" and should not sleep. However, get name...

9.1CVSS5.6AI score0.00219EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/09/28 12:00 a.m.•1 views

PT-2024-10012

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an off-by-one error in the uof get name function of the QAT 420xx driver in the Linux kernel, which can lead to an out-of-bounds access in memory. This could...

7.8CVSS0.00249EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/09/28 12:00 a.m.•2 views

PT-2024-10013

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an out-of-bounds read in the uof get name function of the QAT 4xxx driver in the Linux kernel. This occurs because the fw objs array has "num objs" elements, and...

7.1CVSS5.9AI score0.00258EPSS
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/01/02 3:55 a.m.•11 views

Malicious code in get_name_of_token (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6b5dfc1df3f6f7257bc6a0ffb95fad3de4cde82911c81d5f21f1d8b70d05d6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/03/05 12:00 a.m.•2 views

PT-2022-13471

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 5.6.6 Description The issue is related to a Use After Free condition in the r reg get name idx function. This condition can potentially lead to exploitation. Recommendations For versions prior to 5.6.6, update to...

7.3CVSS0.00751EPSS
SaveExploits2References51
Positive Technologies
Positive Technologies
•added 2022/01/21 12:00 a.m.•1 views

PT-2022-12614

Name of the Vulnerable Software and Affected Versions GPAC version 1.1.0 Description The issue is related to a stack overflow via the function gf node get name at scenegraph/base scenegraph.c. This can lead to a program crash, causing a Denial of Service DoS. Recommendations For GPAC version 1.1....

5.5CVSS0.00621EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2020/09/26 12:00 a.m.•1 views

PT-2020-22000

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions hextoint, get name from EF DatiPersonali, and itacns add data files...

5.7AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/09/25 12:00 a.m.•0 views

PT-2020-21993

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 7 crash has been reported. The crash involves the functions hextoint, get name from EF DatiPersonali, and itacns add data files...

5.7AI score
SaveExploits0References2
Rows per page
Query Builder