171490 matches found
Astra Linux – Vulnerability in freerdp3, freerdp2
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurred in the gdiSurfaceToSurface path of the FreeRDP client due to a mismatch between destination rectangle clamping and the actual copy size. A malicious server can...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fixed NULL pointer access issues. This patch ensures that the UCSI driver waits for all pending tasks in the ucsidisplayportwork workqueue to complete execution before proceeding with the partner...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix the warning from kernelwriteiter 2110.972290 ------------ cut here ------------ 2110.972301 WARNING: CPU: 3 PID: 735 at fs/readwrite.c:599 kernelwriteiter+0x21b/0x280 This patch does not allow writing to directories...
Astra Linux – vulnerability in ruby2.5
REXML is an XML toolkit for Ruby. The REXML gem prior to version 3.2.6 contains a denial-of-service vulnerability when it parses XML containing many characters in its attribute values. Users who need to process untrusted XML may be affected by this vulnerability. REXML gem version 3.2.7 or later...
Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1
In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix buffer overflow in liotargetnaclinfoshow The function liotargetnaclinfoshow uses sprintf in a loop to print details for every iSCSI connection in a session without checking for the buffer length. With...
code-shield
code-shield 한국어 · English An MVP that normalizes vulnerability findings in C/C++ protocol and platform code into reproducible evidence and verifies candidate patches in isolated copies of the target. The repository is named code-shield; the public Python package and CLI use the neutral internal...
ROOT-APP-MAVEN-CVE-2024-38821 CVE-2024-38821 in org.springframework.security:spring-security-web - Patched by Root
Root has patched CVE-2024-38821 in the org.springframework.security:spring-security-web package for Root:Maven. Multiple fixed versions available...
PYSEC-2026-4262 PraisonAI: Platform member PATCH routes allow owner resource rewrites and project lead reassignment delete bypass
Platform member PATCH routes allow owner resource rewrites and project lead reassignment delete bypass Summary praisonai-platform lets an ordinary workspace member patch owner-created project, issue, and agent records even though the paired delete routes enforce owner/admin authorization. For...
PraisonAI: Platform member PATCH routes allow owner resource rewrites and project lead reassignment delete bypass
Platform member PATCH routes allow owner resource rewrites and project lead reassignment delete bypass Summarypraisonai-platform lets an ordinary workspace member patch owner-created project, issue, and agent records even though the paired delete routes enforce owner/admin authorization. For...
ROOT-OS-DEBIAN-13-CVE-2025-10966 CVE-2025-10966 in curl - Patched by Root
Root has patched CVE-2025-10966 in the curl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-8932 CVE-2026-8932 in curl - Patched by Root
Root has patched CVE-2026-8932 in the curl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2024-26461 CVE-2024-26461 in krb5 - Patched by Root
Root has patched CVE-2024-26461 in the krb5 package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2018-5709 CVE-2018-5709 in krb5 - Patched by Root
Root has patched CVE-2018-5709 in the krb5 package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-66046 CVE-2026-66046 in expat - Patched by Root
Root has patched CVE-2026-66046 in the expat package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-ALPINE-317-CVE-2026-45447 CVE-2026-45447 in openssl - Patched by Root
Root has patched CVE-2026-45447 in the openssl package for Root:Alpine:3.17. Multiple fixed versions available...
ROOT-OS-ALPINE-317-CVE-2026-34182 CVE-2026-34182 in openssl - Patched by Root
Root has patched CVE-2026-34182 in the openssl package for Root:Alpine:3.17. Multiple fixed versions available...
ROOT-OS-ALPINE-317-CVE-2026-7383 CVE-2026-7383 in openssl - Patched by Root
Root has patched CVE-2026-7383 in the openssl package for Root:Alpine:3.17. Multiple fixed versions available...
ROOT-OS-ALPINE-317-CVE-2026-34180 CVE-2026-34180 in openssl - Patched by Root
Root has patched CVE-2026-34180 in the openssl package for Root:Alpine:3.17. Multiple fixed versions available...