353 matches found
The vulnerability of the check_has_header() function in the PHP programming language allows a hacker to trigger a service failure.
The vulnerability of the checkhasheader function in the PHP programming language is related to insufficient validation of input data when processing HTTP headers. Exploiting this vulnerability can allow an attacker to cause service failures...
Stack overflow vulnerability in ast_selectors.cpp: in function Sass::ComplexSelector::has_placeholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service (DoS).
...
vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]
...
The vulnerability of the vsock_*_has_data() function in the net/vmw_vsock/af_vsock.c module of Linux kernel allows a hacker to induce a service failure.
The vulnerability of the vsockhasdata function in the net/vmwvsock/afvsock.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
SUSE CVE-2025-21666
In the Linux kernel, the following vulnerability has been resolved: vsock: prevent null-ptr-deref in vsockhasdata|hasspace Recent reports have shown how we sometimes call vsockhasdata when a vsock socket has been de-assigned from a transport see attached links, but we shouldn't. Previous commits...
AZL-56337 CVE-2025-21666 affecting package kernel for versions less than 5.15.180.1-1
In the Linux kernel, the following vulnerability has been resolved: vsock: prevent null-ptr-deref in vsockhasdata|hasspace Recent reports have shown how we sometimes call vsockhasdata when a vsock socket has been de-assigned from a transport see attached links, but we shouldn't. Previous commits...
DEBIAN-CVE-2025-21666
In the Linux kernel, the following vulnerability has been resolved: vsock: prevent null-ptr-deref in vsockhasdata|hasspace Recent reports have shown how we sometimes call vsockhasdata when a vsock socket has been de-assigned from a transport see attached links, but we shouldn't. Previous commits...
CVE-2025-21666 vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]
In the Linux kernel, the following vulnerability has been resolved: vsock: prevent null-ptr-deref in vsockhasdata|hasspace Recent reports have shown how we sometimes call vsockhasdata when a vsock socket has been de-assigned from a transport see attached links, but we shouldn't. Previous commits...
TUBITAK BILGEM Pardus OS My Computer 操作系统命令注入漏洞
TUBITAK BILGEM Pardus OS My Computer is a UI from TUBITAK BILGEM for information and management of disks on a computer. An operating system command injection vulnerability exists in TUBITAK BILGEM Pardus OS My Computer versions prior to 0.7.2, which stems from improper neutralization of special...
SUSE CVE-2024-53177
In the Linux kernel, the following vulnerability has been resolved: smb: prevent use-after-free due to opencacheddir error paths If opencacheddir encounters an error parsing the lease from the server, the error handling may race with receiving a lease break, resulting in opencacheddir freeing the...
UBUNTU-CVE-2024-53178
In the Linux kernel, the following vulnerability has been resolved: smb: Don't leak cfid when reconnect races with opencacheddir opencacheddir may either race with the tcon reconnection even before compoundsendrecv or directly trigger a reconnection via SMB2openinit or SMBqueryinfoinit. The...
PT-2024-30462 · Bplugins Llc · Bplugins Flash & Html5 Video
Name of the Vulnerable Software and Affected Versions: bPlugins LLC Flash & HTML5 Video versions 2.5.30 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This could potentially...
RHSA-2024:4928 Red Hat Security Advisory: kernel security update
Bulletin has no description...
CVE-2024-8275
The The Events Calendar plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'tribehasnextevent' function in all versions up to, and including, 6.6.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...
snappy-java: Unchecked chunk length leads to DoS
A flaw was found in Snappy-java's fileSnappyInputStream hasNextChunk function, which does not sufficiently evaluate input bytes before beginning operations. This issue could allow an attacker to send malicious input to trigger an out of memory error that crashes the program, resulting in a denial...
BELL-CVE-2024-43402 CVE-2024-43402 does not affect BellSoft software
Bulletin has no description...
owlwisemarketing.com.xx3.kz Cross Site Scripting vulnerability OBB-3947284
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CGA-W3FJ-Q3WG-PR5C
Bulletin has no description...
DEBIAN-CVE-2024-40944
In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Fix bug with call depth tracking The call to ccplatformhas triggers a fault and system crash if call depth tracking is active because the GS segment has been reset by loadsegments and GSBASE is now 0 but call depth...