2045 matches found
UBUNTU-CVE-2022-50736
In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix immediate work request flush to completion queue Correctly set send queue element opcode during immediate work request flushing in post sendqueue operation, if the QP is in ERROR state. An undefined ocode value...
CVE-2022-50736
In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix immediate work request flush to completion queue Correctly set send queue element opcode during immediate work request flushing in post sendqueue operation, if the QP is in ERROR state. An undefined ocode value...
CVE-2022-50736 RDMA/siw: Fix immediate work request flush to completion queue
In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix immediate work request flush to completion queue Correctly set send queue element opcode during immediate work request flushing in post sendqueue operation, if the QP is in ERROR state. An undefined ocode value...
PT-2025-53040
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel’s RDMA/siw component related to handling immediate work requests and flushing to the completion queue. An incorrect send queue element opcode during...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from an out-of-bounds access when an immediate work request is flushed to the completion queue...
CVE-2025-55753
An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures 30 days in default configurations, to the backoff timer becoming 0. Attempts to renew the certificate then are repeated without delays until it succeeds. This issue affects Apache HTTP Server: fro...
Vulnerability of the dcn21_set_abm_immediate_disable() function in the drivers/gpu/drm/amd/display/dc/dcn21/dcn21HWSeq.c module – This driver supports AMD graphics card infrastructure for direct rendering in Linux operating systems. It allows attackers to cause service failures.
Vulnerability of the dcn21setabmimmediatedisable function in the drivers/gpu/drm/amd/display/dc/dcn21/dcn21HWSeq.c module – Drivers that support Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems are vulnerable due to a pointer manipulation issue. Exploiting thi...
CVE-2025-65951 Inside Track / Entropy Derby Timelock Encryption Bypassed via Pre-Computed VDF Output Leakage
Inside Track / Entropy Derby is a research-grade horse-racing betting engine. Prior to commit 2d38d2f, the VDF-based timelock encryption system fails to enforce sequential delay against the betting operator. Bettors pre-compute the entire Wesolowski VDF and include vdfOutputHex in their encrypted...
Inside Track 加密问题漏洞
Inside Track is a horse racing betting engine by the individual developer Lumina Mescuwa. Inside Track suffers from an encryption issue vulnerability that stems from the VDF encryption system not enforcing a sequential delay, which could lead to immediate decryption...
MAL-2025-191010 Malicious code in set-nested-prop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e3ace4ffb79a5de4b7a82ae75ffdcccb6233dce2bfa2a4f32f70a3dc6921a03 The package set-nested-prop was found to contain malicious code. Source: ghsa-malware 35b0b9a8f67ec13668f93a14f45e037dc7cb3c33fa4c688e13b10a3cd2c5d3a...
WordPress plugin Email Subscribers & Newsletters 访问控制错误漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. An Access Control Erro...
CVE-2025-63747
SourceForge QaTraq version 6.9.2 is shipped with enabled administrative account credentials in default installations. This allows an attacker who can reach the web application login page to perform an immediate login and gain full administrative access due to the account's default privileges. To ...
CVE-2025-64707 Frappe LMS revoking access did not show immediate effect as roles were cached
Frappe Learning is a learning system that helps users structure their content. Starting in version 2.0.0 and prior to version 2.41.0, when admins revoked a role from the user, the effect was not immediate because of caching. The issue has been fixed in version 2.41.0 by ensuring the cache is...
EUVD-2025-98072
Malicious code in immediatecrayfishz3n npm...
EUVD-2025-104594
Malicious code in immediatehalibutz3n npm...
Malicious code in immediate_halibut_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af368b493186e1b0e8552d18ea4c339461cc202ed1524aabfb9678cfbc43b478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-79064
Malicious code in immediatecardinalz3n npm...
Malicious code in immediate_coral_0xrequest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d25d2985e61dde9abc2f6f6c6f0c1c6b2443451bec17d568b8a93668c275e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...