27 matches found
GHSA-6V24-6WGF-8VJ6 process_lock has a Potential Unsound issue in unlock
The processlock crate 0.1.0 for Rust allows data races in unlock...
GHSA-CM76-QM8V-3J95
creationtimestamp| type| source ---|---|--- 2025-05-20 18:40:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114541619532659321...
GHSA-2F4R-34M4-3W8Q
creationtimestamp| type| source ---|---|--- 2025-05-15 21:33:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16574 2025-05-15 21:55:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114514077067044674...
GHSA-4R4M-QW57-CHR8
creationtimestamp| type| source ---|---|--- 2025-03-31 10:40:16+00:00| seen| https://bsky.app/profile/alesroubicek.indieweb.social.ap.brid.gy/post/3llo62zwmb2o2 2025-03-31 17:30:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9702...
PT-2024-30278 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: A potential issue has been identified, with a reference to an external link for more information. No details are provided about the nature of th...
CVE-2021-47445
In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix null pointer dereference on pointer edp The initialization of pointer dev dereferences pointer edp before edp is null checked, so there is a potential null pointer deference issue. Fix this by only dereferencing edp...
CVE-2021-47211
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix null pointer dereference on pointer csdesc The pointer csdesc return from sndusbfindclocksource could be null, so there is a potential null pointer dereference issue. Fix this by adding a null check before...
CAN-2005-0021
CVE-2005-0021 and CVE-2005-0022 affect Exim MTA. The host_aton() function overflows a buffer when given an illegal IPv6 address with more than 8 components, potentially allowing local code execution. The spa_base64_to_bits() function (SPA authentication) overflows a buffer, potentially enabling a...
GHSA-F56G-CHQP-22M9 Use after free in libpulse-binding
Overview Version 2.5.0 of the libpulse-binding Rust crate, released on the 22nd of December 2018, fixed a potential use-after-free issue with property list iteration due to a lack of a lifetime constraint tying the lifetime of a proplist::Iterator to the Proplist object for which it was created...
CVE-2023-28095
OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions prior to 3.1.7 and 3.2.4 have a potential issue in msgtranslator.c:2628 which might lead to a server crash. This issue was found while fuzzing the function buildresbuffromsipreq but could not be reproduced against a...
CVE-2023-28095
OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions prior to 3.1.7 and 3.2.4 have a potential issue in msgtranslator.c:2628 which might lead to a server crash. This issue was found while fuzzing the function buildresbuffromsipreq but could not be reproduced against a...
CVE-2023-28095 OpenSIPS has vulnerability in the building the local negative replies
OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions prior to 3.1.7 and 3.2.4 have a potential issue in msgtranslator.c:2628 which might lead to a server crash. This issue was found while fuzzing the function buildresbuffromsipreq but could not be reproduced against a...
CVE-2023-28095 OpenSIPS has vulnerability in the building the local negative replies
OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions prior to 3.1.7 and 3.2.4 have a potential issue in msgtranslator.c:2628 which might lead to a server crash. This issue was found while fuzzing the function buildresbuffromsipreq but could not be reproduced against a...
PT-2023-34823 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.15.90 Description: A potential issue exists where sdata can be NULL during AMPDU start in the mac80211 wifi component. The actual impact and attack plausibility have not yet been proven. Recommendations: For...
Mageia: Security Advisory (MGASA-2018-0220)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Design/Logic Flaw
AMD System Management Unit SMU contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code execution...
CVE-2021-26331
AMD System Management Unit SMU contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code execution...
UVI-2021-1000081 ACPI: custom_method: fix potential use-after-free issue
ACPI: custommethod: fix potential use-after-free issue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...
Improper Input Validation
apollo-adminservice does not implement access controls. If users expose apollo-adminservice to internetwhich is not recommended, there are potential security issues since apollo-adminservice is designed to work in intranet and it does not have access control built-in. Malicious hackers may access...
CVE-2018-11910
In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, improper access control can lead to device node and executable to be run from /persist/ which presents a potential issue...