4290 matches found
CVE-2023-4130 ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea()
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix wrong next length validation of ea buffer in smb2setea There are multiple smb2eainfo buffers in FILEFULLEAINFORMATION request from client. ksmbd find next smb2eainfo using -NextEntryOffset of current smb2eainfo. ksmbd...
CVE-2023-4130 ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea()
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix wrong next length validation of ea buffer in smb2setea There are multiple smb2eainfo buffers in FILEFULLEAINFORMATION request from client. ksmbd find next smb2eainfo using -NextEntryOffset of current smb2eainfo. ksmbd...
CVE-2023-4130
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix wrong next length validation of ea buffer in smb2setea There are multiple smb2eainfo buffers in FILEFULLEAINFORMATION request from client. ksmbd find next smb2eainfo using -NextEntryOffset of current smb2eainfo. ksmbd...
CVE-2023-3865 ksmbd: fix out-of-bound read in smb2_write
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bound read in smb2write ksmbdsmb2checkmessage doesn't validate hdr-NextCommand. If -NextCommand is bigger than Offset + Length of smb2 write, It will allow oversized smb2 write length. It will cause OOB read in...
Malicious code in @coolblue-development/next-recently-viewed (npm)
The package @coolblue-development/next-recently-viewed was found to contain malicious code...
Malicious code in ft-next-signup (npm)
The package ft-next-signup was found to contain malicious code...
Malicious code in next-styles (npm)
The package next-styles was found to contain malicious code...
Malicious code in next-time (npm)
The package next-time was found to contain malicious code...
Malicious code in parse-react-next (npm)
The package parse-react-next was found to contain malicious code...
Malicious code in react-type-next (npm)
The package react-type-next was found to contain malicious code...
Malicious code in example-backend-next (npm)
The package example-backend-next was found to contain malicious code...
Malicious code in link-next (npm)
The package link-next was found to contain malicious code...
big-integer-max (1.0.0), big-integer-min (>=1.0.0, <=1.0.1) +25 more potentially affected by unknown CVE via just-next-tick (0.0.0)
just-next-tick NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on just-next-tick and may be impacted: - big-integer-max 1.0.0 - big-integer-min =1.0.0, =0.0.3, =0.0.0, =0.0.0, =0.0.0, =0.0.1, =0.0.9 and more Source cves: unknown CVE Sour...
MAL-2025-25395 Malicious code in link-next (npm)
The package link-next was found to contain malicious code...
Malicious code in with-next (npm)
The package with-next was found to contain malicious code...
Malicious code in just-next-tick (npm)
The package just-next-tick was found to contain malicious code...
shell-jobs (>=0.1.0, <=0.1.1) potentially affected by unknown CVE via next-time (>=0.0.0, <=0.0.1)
next-time NPM version =0.0.0, =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27399...
Malicious code in hs-api-next-gen (npm)
The package hs-api-next-gen was found to contain malicious code...