277 matches found
GHSA-Q37J-3367-FWV7 Apache HugeGraph-Server: RAFT and deserialization vulnerability
A remote code execution vulnerability exists where a malicious Raft node can exploit insecure Hessian deserialization within the PD store. The fix enforces IP-based authentication to restrict cluster membership and implements a strict class whitelist to harden the Hessian serialization process...
Apache HugeGraph-Server: RAFT and deserialization vulnerability
A remote code execution vulnerability exists where a malicious Raft node can exploit insecure Hessian deserialization within the PD store. The fix enforces IP-based authentication to restrict cluster membership and implements a strict class whitelist to harden the Hessian serialization process...
EUVD-2025-203068
A remote code execution vulnerability exists where a malicious Raft node can exploit insecure Hessian deserialization within the PD store. The fix enforces IP-based authentication to restrict cluster membership and implements a strict class whitelist to harden the Hessian serialization process...
CVE-2025-26866
Apache HugeGraph-Server is vulnerable to a remote code execution (RCE) flaw caused by insecure Hessian deserialization within the PD store . A malicious Raft node can exploit this weakness to perform object injection attacks. To mitigate this, the fix implements a strict class whitelist to harden...
PT-2025-50223
Name of the Vulnerable Software and Affected Versions Apache HugeGraph-Server versions prior to 1.7.0 Description A remote code execution issue exists where a malicious Raft node can exploit insecure Hessian deserialization within the PD store. The fix enforces IP-based authentication to restrict...
Vulnerability of the camss_configure_pd() function in the drivers/media/platform/qcom/camss/camss.c module – This driver supports multimedia devices in the Linux kernel. It can be exploited by attackers to cause service failures.
Vulnerability of the camssconfigurepd function in the drivers/media/platform/qcom/camss/camss.c module – The driver for supporting multimedia devices in Linux operating systems relies on pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
EUVD-2007-4820
Malware in sbrugna...
EUVD-2017-9278
Malware in sbrugna...
EUVD-2007-3254
Malware in sbrugna...
EUVD-2013-0172
Malware in sbrugna...
CVE-2023-53545
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: unmap and remove csava properly Root PD BO should be reserved before unmap and remove a bova from VM otherwise lockdep will complain. v2: check fpriv-csava is not NULL instead of amdgpumcbp christian 14616.936827...
UBUNTU-CVE-2023-53545
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: unmap and remove csava properly Root PD BO should be reserved before unmap and remove a bova from VM otherwise lockdep will complain. v2: check fpriv-csava is not NULL instead of amdgpumcbp christian 14616.936827...
CVE-2023-53545 drm/amdgpu: unmap and remove csa_va properly
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: unmap and remove csava properly Root PD BO should be reserved before unmap and remove a bova from VM otherwise lockdep will complain. v2: check fpriv-csava is not NULL instead of amdgpumcbp christian 14616.936827...
EUVD-2022-36285
Malicious code in bioql PyPI...
EUVD-2021-7440
Malicious code in bioql PyPI...
VulnCheck KEV: CVE-2022-37932
A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches. The vulnerability could be remotely exploited to allow authentication bypass. HPE has made the following software updates to resolve the vulnerability in...
Malicious code in @zalastax/nolb-pd (npm)
The package @zalastax/nolb-pd was found to contain malicious code...
MAL-2025-13094 Malicious code in @zalastax/nolb-pd (npm)
The package @zalastax/nolb-pd was found to contain malicious code...