18160 matches found
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46689)
soc: qcom: cmd-db: Map shared memory as WC, not WB Linux does not write into cmd-db region. This region of memory is write protected by XPU. XPU may sometime falsely detect clean cache eviction as write into the write protected region leading to secure interrupt which causes an endless loop...
CVE-2025-63829
eProsima Fast-DDS v3.3 and before has an infinite loop vulnerability caused by integer overflow in the Timet:: fraction function...
CVE-2025-63829
eProsima Fast-DDS v3.3 and before has an infinite loop vulnerability caused by integer overflow in the Timet:: fraction function...
CVE-2025-63829
eProsima Fast-DDS v3.3 and before has an infinite loop vulnerability caused by integer overflow in the Timet:: fraction function...
CVE-2025-63829
eProsima Fast-DDS up to v3.3 has an infinite loop vulnerability caused by an integer overflow in Time_t::fraction(). Affected: Fast-DDS v3.3 and earlier. Impact: potential denial of service due to indefinite looping; no exploitation details provided in the documents. Remediation: update to v3.4 o...
SUSE CVE-2025-40192
In the Linux kernel, the following vulnerability has been resolved: Revert "ipmi: fix msg stack when IPMI is disconnected" This reverts commit c608966f3f9c2dca596967501d00753282b395fc. This patch has a subtle bug that can cause the IPMI driver to go into an infinite loop if the BMC misbehaves in ...
CLSA-2025-1763141692 udisks2: Fix of CVE-2025-8067
CVE-2025-8067: fix issue allowing unprivileged users to create loop devices with negative index values...
HSEC-2023-0004 xml-conduit unbounded entity expansion
xml-conduit unbounded entity expansion A vulnerability was found in xml-conduit. It has been classified as problematic. Affected is an unknown function of the file xml-conduit/src/Text/XML/Stream/Parse.hs of the component DOCTYPE Entity Expansion Handler. The manipulation leads to infinite loop. ...
CLSA-2025-1763123915 udisks2: Fix of CVE-2025-8067
CVE-2025-8067: fix issue allowing unprivileged users to create loop devices by validating lower bound of index parameter in loop device handler function...
mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop
...
SUSE CVE-2025-40180
In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop The cleanup loop was starting at the wrong array index, causing out-of-bounds access. Start the loop at the correct index for zero-indexed arrays to prevent...
CLSA-2025-1763054281 python: Fix of CVE-2025-8194
CVE-2025-8194: fix infinite loop and deadlock in TarFile extraction and entry enumeration APIs...
CLSA-2025-1763033941 python: Fix of CVE-2025-8194
CVE-2025-8194: fix infinite loop and deadlock in TarFile extraction and entry enumeration APIs...
CLSA-2025-1763033745 python: Fix of CVE-2025-8194
CVE-2025-8194: fix infinite loop and deadlock in TarFile extraction and entry enumeration APIs...
EUVD-2025-178018
Malicious code in loop-cosmos-perturbation-andromeda npm...
EUVD-2025-175807
Malicious code in unuk-loop-mdx-mysql npm...
EUVD-2025-177308
Malicious code in passport-coronalmassejection-vulcan-loop npm...
Malicious code in eslint-loop-meteor-jasmine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74c329a482c68f847b5078bc7c6cd99a0df89ac2ee483147aa5ed8810a29dc2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in fork-lightyear-commitlint-unuk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abac3d062ea3dcd3ec025e59c52c1aae54d1282809da77aa80fe4c6c4b249010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...