Lucene search
+L

9550 matches found

CNNVD
CNNVD
•added 2025/02/26 12:00 a.m.•27 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a node reference returned by ofparsephandle not being properly freed in ariesaudioprobe...

5.5CVSS6.4AI score0.00261EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/02/26 12:00 a.m.•20 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a failure to check macid in the rtw89phycfoparse function, resulting in an array out-of-bounds...

7.8CVSS6.3AI score0.00321EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/02/26 12:00 a.m.•5 views

PT-2025-8616

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A refcount leak issue has been identified in the Linux kernel, specifically in the adi-axi-adc driver. The of parse phandle function returns a node pointer with an incremented refcount,...

5.5CVSS5.7AI score0.00268EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/02/26 12:00 a.m.•2 views

PT-2025-8585

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A refcount leak issue has been identified in the Linux kernel, specifically in the dmaengine ti component. The problem arises from the of parse phandle function returning a node pointer...

5.5CVSS5.8AI score0.00266EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/02/26 12:00 a.m.•5 views

PT-2025-8165

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified where a refcount leak occurs due to a missing of node put call. This happens when the node pointer is returned by of find node by type or ...

5.5CVSS5.8AI score0.00222EPSS
SaveExploits0
CNNVD
CNNVD
•added 2025/02/26 12:00 a.m.•23 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a reference count leak due to a missing ofnodeput in wcd934xcodecparsedata...

5.5CVSS6.2AI score0.00268EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/02/26 12:00 a.m.•4 views

PT-2025-8141

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified, specifically in the ath10k module, related to error handling in the ath10k setup msa resources function. The problem arises because the...

5.5CVSS6.1AI score0.00261EPSS
SaveExploits0
Amazon
Amazon
•added 2025/02/25 12:00 a.m.•15 views

Low: docker

Issue Overview: golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors...

3.1CVSS6.9AI score0.00585EPSS
SaveExploits0
Amazon
Amazon
•added 2025/02/25 12:00 a.m.•18 views

Low: docker

Issue Overview: golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors...

3.1CVSS6.9AI score0.00585EPSS
SaveExploits0
osv_oesa
osv_oesa
•added 2025/02/21 11:08 a.m.•25 views

OESA-2025-1148 python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C...

6.8CVSS6.4AI score0.01556EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/02/21 12:00 a.m.•6 views

PT-2025-55174

Уязвимость функции parser parse opt утилиты архивирования Cpio связана с неправильным побитовым смещением целого числа. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

2.1CVSS5.8AI score
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2025/02/20 2:33 p.m.•18 views

SUSE CVE-2024-45775

A flaw was found in grub2 where the grubextcmddispatcher function calls grubarglistalloc to allocate memory for the grub's argument list. However, it fails to check in case the memory allocation fails. Once the allocation fails, a NULL point will be processed by the parseoption function, leading...

6.4CVSS5.7AI score0.00292EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2025/02/20 12:00 a.m.•17 views

PT-2025-7595 · Libming · Libming

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: A memory leak has been identified in the parseSWF EXPORTASSETS function in util/parser.c of libming. Recommendations: For libming version 0.4.8, consider disabling the parseSWF EXPORTASSETS function as a...

8.2CVSS5.3AI score0.0039EPSS
SaveExploits1References8
osv_debian
osv_debian
•added 2025/02/18 8:15 p.m.•13 views

DEBIAN-CVE-2024-45775

A flaw was found in grub2 where the grubextcmddispatcher function calls grubarglistalloc to allocate memory for the grub's argument list. However, it fails to check in case the memory allocation fails. Once the allocation fails, a NULL point will be processed by the parseoption function, leading...

5.2CVSS5.7AI score0.00292EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/18 12:00 a.m.•26 views

PT-2025-34421

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The parse longname function in the Ceph subsystem does not guarantee a NUL-terminated string when using strrchr, leading to a potential issue. The function utilizes kmemdup nul to crea...

9.8CVSS6.6AI score0.00405EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/02/17 12:00 a.m.•15 views

PT-2025-7663 · Net Snmp · Net-Snmp

Name of the Vulnerable Software and Affected Versions: netsnmp affected versions not specified Description: The issue is related to a heap-use-after-free error. Technical details about the error include the netsnmp hex to binary function, snmpv3 parse arg function, and netsnmp parse args function...

6.8AI score
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/02/14 7:31 p.m.•30 views

CVE-2025-25285 @octokit/endpoint has a Regular Expression in parse that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking

@octokit/endpoint turns REST API endpoints into generic request options. Starting in version 4.1.0 and prior to version 10.1.3, by crafting specific options parameters, the endpoint.parseoptions call can be triggered, leading to a regular expression denial-of-service ReDoS attack. This causes the...

5.3CVSS5.8AI score0.00628EPSS
SaveExploits0References3
osv_ghsa
osv_ghsa
•added 2025/02/14 5:56 p.m.•40 views

GHSA-X4C5-C7RF-JJGV @octokit/endpoint has a Regular Expression in parse that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking

Summary By crafting specific options parameters, the endpoint.parseoptions call can be triggered, leading to a regular expression denial-of-service ReDoS attack. This causes the program to hang and results in high CPU utilization. Details The issue occurs in the parse function within the parse.ts...

5.3CVSS5.9AI score0.00628EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2025/02/14 5:56 p.m.•49 views

@octokit/endpoint has a Regular Expression in parse that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking

Summary By crafting specific options parameters, the endpoint.parseoptions call can be triggered, leading to a regular expression denial-of-service ReDoS attack. This causes the program to hang and results in high CPU utilization. Details The issue occurs in the parse function within the parse.ts...

5.3CVSS5.9AI score0.00628EPSS
SaveExploits0References5Affected Software1
osv_clsa
osv_clsa
•added 2025/02/14 9:37 a.m.•26 views

CLSA-2025-1739525872 Fix CVE(s): CVE-2024-53104

CVE-url: https://ubuntu.com/security/CVE-2024-53104 - media: uvcvideo: Skip parsing frames of type UVCVSUNDEFINED in uvcparseformat...

7.8CVSS7.3AI score0.03395EPSS
SaveExploits1References1
Rows per page
Query Builder