Lucene search
K

8 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.2 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: Wifi: ath12k: Fix for out-of-bound access to qmiinvokehandler Currently, there is no terminator entry for ath12kqmimsghandlers, thus generating the following KASAN warning:...

7.1CVSS6.1AI score0.00036EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/05 11:25 a.m.4 views

EUVD-2026-27295

OpenClaw versions 2026.4.10 before 2026.4.14 contain a missing authorization vulnerability in the Microsoft Teams SSO invoke handler that fails to apply sender allowlist checks. Attackers can bypass sender authorization by sending SSO invoke requests that are processed without proper validation,...

6.3CVSS5.8AI score0.00039EPSS
Exploits0References3
CVE
CVE
added 2026/05/05 11:25 a.m.8 views

CVE-2026-43572

OpenClaw 2026.4.10

6.3CVSS5.8AI score0.00039EPSS
Exploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/05 11:25 a.m.3 views

CVE-2026-43572

OpenClaw versions 2026.4.10 before 2026.4.14 contain a missing authorization vulnerability in the Microsoft Teams SSO invoke handler that fails to apply sender allowlist checks. Attackers can bypass sender authorization by sending SSO invoke requests that are processed without proper validation,...

6.3CVSS5.8AI score0.00039EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2026/04/17 9:51 p.m.2 views

GHSA-GC9R-867R-J85F OpenClaw: Microsoft Teams SSO invoke handler missed sender authorization checks

Summary Microsoft Teams SSO invoke handler missed sender authorization checks. Affected Packages / Versions - Package: openclaw - Ecosystem: npm - Affected versions: = 2026.4.10 = 2026.4.14 Impact Microsoft Teams SSO signin invoke handling could process an invoke from a sender before applying the...

6.3CVSS5.7AI score0.00039EPSS
Exploits0References4
CVE
CVE
added 2025/12/30 12:15 p.m.4 views

CVE-2022-50871

The CVE-2022-50871 entry concerns the Linux kernel component wifi: ath11k, specifically the qmi_msg_handler data structure initialization. The issue could allow an infinite loop while searching for a handler when a msg-id handler is missing from the handlers array, leading to out-of-bounds access...

6.1AI score0.00023EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2024/06/22 3:35 a.m.1 views

SUSE CVE-2024-38572

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix out-of-bound access of qmiinvokehandler Currently, there is no terminator entry for ath12kqmimsghandlers hence facing below KASAN warning, ================================================================== BUG:...

5.3CVSS6.7AI score0.00036EPSS
Exploits0References10
OSV
OSV
added 2024/06/19 2:15 p.m.2 views

DEBIAN-CVE-2024-38572

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix out-of-bound access of qmiinvokehandler Currently, there is no terminator entry for ath12kqmimsghandlers hence facing below KASAN warning, ================================================================== BUG:...

7.1CVSS5.5AI score0.00036EPSS
Exploits0References1
Rows per page
Query Builder