11082 matches found
webkitgtk: heap-use-after-free in WebCore::RenderLayer::repaintBlockSelectionGaps()
A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before 2.36.8 allows attackers to execute code remotely...
webkitgtk: heap-use-after-free in WebCore::RenderLayer::setNextSibling()
A use-after-free vulnerability in WebCore::RenderLayer::setNextSibling in WebKitGTK before 2.36.8 allows attackers to execute code remotely...
golang: crypto/tls: large handshake records may cause panics
A flaw was found in Golang Go, where it is vulnerable to a denial of service caused when processing large TLS handshake records. By sending specially-crafted TLS handshake records, a remote, authenticated attacker can cause a denial of service condition...
PT-2023-12097 · Amd · 3Rd Gen Amd Epyc™ +19
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to insufficient address validation. This may allow an attacker with a compromised ABL and UApp to corrupt sensitive memory location...
PT-2023-23170 · Unknown · Postgresnio
Name of the Vulnerable Software and Affected Versions: PostgresNIO versions prior to 1.14.2 Description: The issue affects users of PostgresNIO who connect to servers with TLS enabled, allowing a man-in-the-middle attacker to inject false responses to the client's first few queries despite the us...
Important: kernel-livepatch-6.1.19-30.43
Issue Overview: A use-after-free flaw was found in btrfssearchslot in fs/btrfs/ctree.c in btrfs in the Linux Kernel. This flaw allows an attacker to crash the system and possibly cause a kernel information lea CVE-2023-1611 dotlsgetsockopt in net/tls/tlsmain.c in the Linux kernel through 6.2.6...
Low: openssl security and bug fix update
OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: Using a Custom Cipher with NIDundef may lead to NULL encryption CVE-2022-3358 For more details...
PT-2025-26012 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the block layer and the blk-rq-qos framework. The issue occurs when the io.cost.qos file is written by two CPUs...
CVE-2023-31129
The Contiki-NG operating system versions 4.8 and prior can be triggered to dereference a NULL pointer in the message handling code for IPv6 router solicitiations. Contiki-NG contains an implementation of IPv6 Neighbor Discovery ND in the module os/net/ipv6/uip-nd6.c. The ND protocol includes a...
USN-6059-1 erlang vulnerability
It was discovered that Erlang did not properly implement TLS client certificate validation during the TLS handshake. A remote attacker could use this issue to bypass client authentication...
Apache StreamPark Input Validation Error Vulnerability
Apache StreamPark is the United States Apache Apache Foundation of a streaming media application development framework. Apache StreamPark suffers from an input validation error vulnerability that stems from the fact that when a user modifies his or her profile, the username is passed as a paramet...
Contiki-NG 代码问题漏洞
Contiki-NG is an open source cross-platform operating system for next-generation IoT Internet of Things devices. A code issue vulnerability exists in Contiki-NG 4.8 and earlier versions that stems from the message handler not checking RS messages with SLLAO, which indicates a link layer address...
Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2023-1764)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 22.04 LTS : Linux kernel (Intel IoTG) vulnerabilities (USN-6057-1)
The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6057-1 advisory. It was discovered that the Traffic-Control Index TCINDEX implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker...
Undertow: Infinite loop in SslConduit during close
A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates...
Improper Certificate Validation
Overview faye is a simple pub/sub messaging for the web. Affected versions of this package are vulnerable to Improper Certificate Validation due to not implementing certificate verification by default, meaning that it does not check whether the server presents a valid and trusted TLS certificate...
verifyWithdrawalCredentialsAndBalance does not verify that oracleBlockNumber is the latest block number.
Lines of code Vulnerability details Impact After participating in Ethereum Staking, you may receive shares based on your balance when it was 32 ETH, even though you may have suffered a certain level of slashing at 32 ETH. Until some conscientious watcher proves the slashing in the Consensus Layer...
The vulnerability of the SIP ALG server of Juniper Networks Junos OS allows a attacker to trigger a service failure.
The vulnerability of the SIP ALG server of Juniper Networks Junos OS is related to incorrect handling of requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
