27487 matches found
cve-2019-14220
Riepilogo Un metodo non protetto in un servizio bstutils in BlueStacks 4.120 e precedenti su Mac e 4.110 e precedenti su Windows permette a un attaccante locale di leggere il contenuto di file arbitrari con privilegi di sistema. Descrizione BlueStacks è un emulatore Android disponibile per sistem...
CVE-2026-56652
Dool in versions up to 1.3.8 is vulnerable to a CSV injection vulnerability when exporting data to a CSV file, as it fails to sanitize cell content beginning with special formula characters like =, +, -, or @. A local attacker can exploit this by running a process with a crafted name starting wit...
CVE-2024-55511
CVE-2024-55511 Este repositório foi arquivado e movido para cá Uma vulnerabilidade de desreferência de ponteiro nulo no Macrium Reflect anterior à versão 8.1.8017 permite que um atacante local cause uma falha no sistema ou potencialmente eleve seus privilégios através da execução de um executável...
EUVD-2026-67039
opensslencrypt pip package openssl-encrypt versions 1.4.8 and earlier store an mTLS client private key in cleartext within a world-readable 0644 SharedPreferences file via the desktop GUI's Settings screen 'combined certificate and private key' PEM field. A local attacker with file system access...
CVE-2026-80589
A flaw was found in the Linux kernel's block subsystem. This vulnerability occurs when a disk's initialization fails before it is fully integrated, causing a critical timer to remain active even after the associated memory is released. This improper handling of memory can lead to a use-after-free...
CVE-2026-80526
A flaw was found in the Linux kernel's ASoC Audio System on Chip tas2562 driver. The tas2562volumecontrolput function lacks proper validation of control values provided by userspace. A local attacker could exploit this by supplying a specially crafted value, leading to an array overflow and an...
CVE-2026-56652 Formula Injection in dool project
Dool in versions up to 1.3.8 is vulnerable to a CSV injection vulnerability when exporting data to a CSV file, as it fails to sanitize cell content beginning with special formula characters like =, +, -, or @. A local attacker can exploit this by running a process with a crafted name starting wit...
CVE-2026-56652
Dool (versions up to 1.3.8 ) is affected by a CSV injection vulnerability in its CSV export functionality. The tool fails to sanitize cell content beginning with special formula characters (=, +, -, or @), allowing a local attacker to craft a process name starting with one of these characters, th...
CVE-2026-56652 Formula Injection in dool project
Dool in versions up to 1.3.8 is vulnerable to a CSV injection vulnerability when exporting data to a CSV file, as it fails to sanitize cell content beginning with special formula characters like =, +, -, or @. A local attacker can exploit this by running a process with a crafted name starting wit...
CVE-2026-80568
A flaw was found in the Linux kernel's synaptics-rmi4 input driver. Changing the diagnostic report type while a video stream V4L2 is active can alter the expected report size. Since V4L2 buffers are allocated based on the initial size at stream start, a larger subsequent report could lead to a he...
CVE-2026-49114
A flaw was found in ONNX. The saveexternaldata function is vulnerable to symlink following and path traversal. A local attacker with write access to a directory where a victim serializes external data can exploit this by pre-planting a symlink. This allows the attacker to cause the victim's write...
CVE-2026-46345
A flaw was found in compliance-trestle. The trestle author jinja command, when processing the -o/--output argument, is vulnerable to path traversal. This allows a local attacker to write files to arbitrary locations outside the intended workspace by providing specially crafted path sequences or...
CVE-2026-74747
A flaw was found in the Linux kernel's IP Virtual Server IPVS component. A local attacker can manipulate the IP Header Length ihl field within network packets. This manipulation can lead to an out-of-bounds access when the kernel attempts to revalidate embedded headers, potentially causing system...
Copy-Fail_Detect_and_mitigate_CVE-2026-31431
Copy Fail – CVE-2026-31431-Erkennungs- und Minderungstool Erkennen der Exposition gegenüber CVE-2026-31431 Copy Fail und optionales Anwenden einer Host-Minderung durch Deaktivieren des Kernel-Moduls algifaead auf betroffenen Systemen. Was dieses Repository bietet copyfail-check.sh – prüft den...
CVE-2026-80553
A flaw was found in the s390/vfioccw component of the Linux kernel. This vulnerability arises from the improper management of workqueues, where existing tasks might not be canceled before associated resources are released. A local attacker could potentially leverage this issue to trigger a...
CVE-2026-74753
A flaw was found in the Linux kernel's performance monitoring perf subsystem. This vulnerability allows a local attacker to trigger a use-after-free condition by improperly handling exited events as group leaders. Successful exploitation could lead to a system crash, resulting in a denial of...
CVE-2026-74739
A flaw was found in the Linux kernel's clsu32 module, responsible for traffic control. This vulnerability occurs because the u32bindclass function incorrectly handles certain data structures, leading to a slab-out-of-bounds read. A local attacker with network administration capabilities could...
CVE-2026-80576
A flaw was found in the Linux kernel's drm/amdgpu component. A local attacker could exploit this vulnerability by providing oversized input buffer IB bytes to the amdgpucsp2ib function on Graphics GFX rings. This lack of size validation allows the oversized values to corrupt adjacent control bits...
CVE-2026-74734
A flaw was found in the Linux kernel's FireWire IEEE 1394 Open Host Controller Interface OHCI driver. During the error handling path of the driver's probe function, a NULL pointer dereference can occur in the arcontextrelease function if the context was not properly initialized. This vulnerabilit...