29493 matches found
smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
...
smb: client: fix potential UAF in cifs_debug_files_proc_show()
...
Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. (For Mbed TLS, the fix is also available in versions 2.7.12 and 2.16.3.)
...
CVE-2025-9939
CodeAstro Real Estate Management System 1.0 is affected by a cross-site scripting (XSS) vulnerability in an unknown function of /propertyview.php where manipulation of the msg parameter enables remote exploitation. Multiple sources confirm the issue and that the exploit has been publicly disclose...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from an SMB server link operation resulting in a deadlock...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from a null pointer dereference due to a failure of the w7090p tuner to check message length...
Amazon Linux 2 : samba, --advisory ALAS2-2025-2979 (ALAS-2025-2979)
The version of samba installed on the remote host is prior to 4.10.16-24. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2979 advisory. All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be...
CodeAstro Real Estate Management System 代码注入漏洞
CodeAstro Real Estate Management System is a real estate management system from CodeAstro. A code injection vulnerability exists in CodeAstro Real Estate Management System version 1.0, which stems from improper manipulation of the parameter msg in the file /propertyview.php, which could lead to a...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a null pointer dereference due to a failure of the dib7090p tuner to check message length...
Google Android elevation of privilege vulnerability (CNVD-2025-30729)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that is caused by a type confusion error in avdtmsgind of avdtmsg.cc. An attacker can exploit the vulnerability to gain elevated privileges on the system...
PT-2025-35872
Name of the Vulnerable Software and Affected Versions: SAEMM affected versions not specified Description: An out-of-bounds read issue exists in the SAEMM DiscloseMsId function within SAEMM RadioMessageCodec.c. This could lead to remote information disclosure after authentication, requiring no...
Insufficient validation in cross-origin communication (postMessage) in reveal.js version 3.9.1 and earlier allow attackers to perform cross-site scripting attacks.
...
smb: client: guarantee refcounted children from parent session
...
smb: client: fix potential UAF in smb2_is_valid_oplock_break()
...
smb: client: fix use-after-free in smb2_query_info_compound()
...
smb3: missing lock when picking channel
...
Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays.
...
Parsing issue in protobuf message-type extension
...