112 matches found
CVE-2026-0968
A flaw was found in libssh in which a malicious SFTP SSH File Transfer Protocol server can exploit this by sending a malformed 'longname' field within an SSHFXPNAME message during a file listing operation. This missing null check can lead to reading beyond allocated memory on the heap. This can...
CVE-2022-50713
In the Linux kernel, the following vulnerability has been resolved: clk: visconti: Fix memory leak in viscontiregisterpll @pll-ratetable has allocated memory by kmemdup, if clkhwregister fails, it should be freed, otherwise it will cause memory leak issue, this patch fixes it...
PT-2025-28052 · Undefined · Undefined
CVE-2024-7403 Rejected reason https://t.co/clYkAJZsGX...
CVE-2025-22062
In the Linux kernel, the following vulnerability has been resolved: sctp: add mutual exclusion in procsctpdoudpport We must serialize calls to sctpudpsockstop and sctpudpsockstart or risk a crash as syzbot reported: Oops: general protection fault, probably for non-canonical address...
CVE-2025-2849
A vulnerability, which was classified as problematic, was found in UPX up to 5.0.0. Affected is the function PackLinuxElf64::unDTINIT of the file src/plxelf.cpp. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been...
CVE-2022-49749
In the Linux kernel, the following vulnerability has been resolved: i2c: designware: use casting of u64 in clock multiplication to avoid overflow In functions i2cdwscllcnt and i2cdwsclhcnt may have overflow by depending on the values of the given parameters including the icclk. For example in our...
CVE-2023-52936
In the Linux kernel, the following vulnerability has been resolved: kernel/irq/irqdomain.c: fix memory leak with using debugfslookup When calling debugfslookup the result must have dput called on it, otherwise the memory will leak over time. To make things simpler, just call debugfslookupandremov...
PT-2025-3107 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions are specified. Description: The issue was initially considered but later rejected as it was determined not to be a security issue. Further investigation confirmed this assessment. Recommendations: A...
Description of the security update for Project 2016: December 10, 2024 (KB5002652)
Description of the security update for Project 2016: December 10, 2024 KB5002652 Summary This security update for Microsoft Office provides defense-in-depth update to help improve security-related features. To learn more about the update, see Microsoft advisory ADV240002. Note: To apply this...
PT-2024-17425 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue was initially reported but later rejected as a candidate, and its usage was prevented. No further details are available about the natu...
Microsoft Azure 安全漏洞
Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft USA. A security vulnerability exists in Microsoft Azure. An attacker can exploit the vulnerability to elevate privileges. No information about this vulnerability is available at this time, so stay tuned ...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel. No information about this vulnerability is available at this time, so stay tuned to CNNVD or vendor announcements...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel. No information about this vulnerability is available at this time, so stay tuned to CNNVD or vendor announcements...
Linux kernel security vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...
Linux kernel security vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...
Linux kernel security vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...
Linux kernel security vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...
PT-2024-14286 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is mentioned on Twitter, but details are scarce. A link is provided, but it does not offer additional information about the issue...
Microsoft Azure Site Recovery Security Vulnerability
Microsoft Azure Site Recovery is a type of Site Recovery DRaaS from Microsoft, USA. It is used for cloud and hybrid cloud architectures. A security vulnerability exists in Microsoft Azure Site Recovery. No information about this vulnerability is available at this time, so please stay tuned to CNN...