Lucene search
+L

7 matches found

OSV
OSV
•added 2026/07/19 3:40 p.m.•14 views

CVE-2026-64099 drm/v3d: Fix use-after-free of CPU job query arrays on error path

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix use-after-free of CPU job query arrays on error path The CPU job ioctl's fail label calls kvfree on cpujob's timestamp and performance query arrays after v3djobcleanup, which drops the job's last reference and frees...

7.8CVSS5.4AI score
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2025/05/23 1:02 a.m.•17 views

CVE-2022-2500

A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1. A stored XSS flaw in job error messages allows attackers to perform arbitrary actions on behalf of victims at client side...

5.4CVSS5.1AI score0.00734EPSS
SaveExploits0References1
OSV
OSV
•added 2025/02/26 7:00 a.m.•11 views

UBUNTU-CVE-2022-49165

In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers If the application queues an NV12M jpeg as output buffer, but then queues a single planar capture buffer, the kernel will crash with "Unable to handle kerne...

5.5CVSS5.8AI score0.00261EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2022/08/05 3:12 p.m.•37 views

CVE-2022-2500

A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1. A stored XSS flaw in job error messages allows attackers to perform arbitrary actions on behalf of victims at client side...

4.4CVSS5.5AI score0.00734EPSS
SaveExploits0References3
Mend
Mend
•added 2022/08/05 3:12 p.m.•1 views

CVE-2022-2500

A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1. A stored XSS flaw in job error messages allows attackers to perform arbitrary actions on behalf of victims at client side...

5.4CVSS0.00734EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/05 12:00 a.m.•6 views

CVE-2022-2500: Improper Neutralization of Input During Web Page Generation

A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1. A stored XSS flaw in job error messages allows attackers to perform arbitrary actions on behalf of victims at client side...

5.4CVSS5.8AI score0.00734EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
•added 2017/01/07 12:00 a.m.•26 views

Update Rollup 7 for System Center 2012 R2 Orchestrator

Update Rollup 7 for System Center 2012 R2 Orchestrator Introduction This article describes the issues that are fixed in Update Rollup 7 for Microsoft System Center 2012 R2 Orchestrator. It also contains the installation instructions for Update Rollup 7 for System Center 2012 R2 Orchestrator. Issu...

6.2AI score
SaveExploits0
Rows per page
Query Builder