Lucene search
K

8 matches found

Github Security Blog
Github Security Blog
added 2026/05/05 10:18 p.m.8 views

ciguard: Container image runs as root (no USER directive)

Summary The published ghcr.io/jo-jo98/ciguard container image inherits the default root user because the Dockerfile lacks a USER directive. ciguard is a static analyser with no need for root privileges; running as root inside a container makes any future container-runtime escape CVE more impactfu...

3CVSS5.8AI score0.00005EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2025/12/24 1:16 p.m.0 views

UBUNTU-CVE-2025-68735

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Prevent potential UAF in group creation This commit prevents the possibility of a use after free issue in the GROUPCREATE ioctl function, which arose as pointer to the group is accessed in that ioctl function after...

5.7AI score0.00024EPSS
Exploits0References11
Positive Technologies
Positive Technologies
added 2025/12/24 12:0 a.m.2 views

PT-2025-53001

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the drm/panthor subsystem of the Linux kernel, specifically within the GROUP CREATE ioctl function. The issue arises from accessing a pointer to a group...

6AI score0.00024EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/12/24 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-68735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/panthor: Prevent potential UAF in group creation This commit prevents the possibility of a use after free issue in the GROUPCREATE ioctl function, which aro...

5.8AI score0.00024EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/10 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2024-46837

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Restrict high priorities on groupcreate We were allowing any users to create a...

5.5CVSS5.1AI score0.00019EPSS
Exploits0References2
CVE
CVE
added 2025/03/21 12:0 a.m.48 views

CVE-2025-30345

OpenSlides CVE-2025-30345 affects OpenSlides versions prior to 4.2.5. The vulnerability arises in the chat_group.create action: while some HTML elements (e.g., SCRIPT) are filtered, others are not, and HTML entities are not consistently encoded when deleting chats or deleting messages, potentiall...

4.1CVSS6.7AI score0.00185EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2024/09/27 1:15 p.m.1 views

DEBIAN-CVE-2024-46837

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Restrict high priorities on groupcreate We were allowing any users to create a high priority group without any permission checks. As a result, this was allowing possible denial of service. We now only allow the DRM...

5.5CVSS5.4AI score0.00019EPSS
Exploits0References1
OSV
OSV
added 2024/09/27 1:15 p.m.0 views

UBUNTU-CVE-2024-46837

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Restrict high priorities on groupcreate We were allowing any users to create a high priority group without any permission checks. As a result, this was allowing possible denial of service. We now only allow the DRM...

5.5CVSS5.7AI score0.00019EPSS
Exploits0References5
Rows per page
Query Builder