3585 matches found
CBL Mariner 2.0 Security Update: lua / memcached / ntopng (CVE-2021-44964)
The version of lua / memcached / ntopng installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-44964 advisory. - Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.05.4.3...
CVE-2025-38338 fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio()
In the Linux kernel, the following vulnerability has been resolved: fs/nfs/read: fix double-unlock bug in nfsreturnemptyfolio Sometimes, when a file was read while it was being truncated by another NFS client, the kernel could deadlock because foliounlock was called twice, and the second call wou...
CVE-2025-38186
In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix double invocation of bnxtulpstop/bnxtulpstart Before the commit under the Fixes tag below, bnxtulpstop and bnxtulpstart were always invoked in pairs. After that commit, the new bnxtulprestart can be invoked after...
PT-2025-27700
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A deadlock issue has been identified in the Linux kernel, specifically in the e1000 driver. The problem occurs when e1000 down calls cancel work sync for the e1000 reset task, which ca...
PT-2025-27702
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free UAF issue was found in the Linux kernel, specifically in the ath12k core init function. This issue occurs when the execution of ath12k core hw group assign or ath12k...
CVE-2025-50405
Intelbras RX1500 Router v2.2.17 and before is vulnerable to Incorrect Access Control in the FirmwareUpload function and GetFirmwareValidation function...
PT-2025-30813
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the virtio-net xsk receive rx path related to frame length checking. The buf to xdp function incorrectly calculates the maximum frame length for the first buffer,...
WordPress Beaver Builder plugin code issue vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A code issue vulnerability exists in the WordPress Beaver Builder plugin that stems from a lack of file type validation, which can be exploited by an attacker to cause an...
CVE-2015-0849
pycode-browser versions prior to 1.0 are susceptible to a predictable temporary file vulnerability (CWE-377). This flaw allows for potential security risks due to the way the application handles temporary files in a manner that can be anticipated by an attacker. No specific exploitation details o...
CVE-2015-0843
Versions of yubiserver prior to 0.6 are vulnerable to buffer overflows caused by the misuse of the sprintf function. This vulnerability falls under CWE-120 (Buffer Copy without Checking Size of Input). While the technical root cause is identified, specific exploit details are not provided in the ...
CVE-2015-0842
The yubiserver software, in versions prior to 0.6 , is vulnerable to SQL injection issues. This flaw could potentially allow an attacker to achieve an authentication bypass . While technical exploitation details or specific patch versions are not provided in the documents, the vulnerability is as...
CVE-2013-1424
The matplotlib library is vulnerable to a buffer overflow caused by insufficient input validation in certain parsing functions, leading to improper handling of buffer boundaries. An attacker can exploit this by supplying specially crafted input to trigger a memory overwrite, potentially leading t...
CVE-2021-41691
A SQL injection vulnerability exists in OS4Ed Open Source Information System Community v8.0 . The flaw is caused by the improper handling of the student_id and TRANSFER{SCHOOL] parameters within a POST request sent to the /TransferredOutModal.php endpoint. Successful exploitation allows a remote ...
CVE-2022-50100
In the Linux kernel, the following vulnerability has been resolved: sched/core: Do not requeue task on CPU excluded from cpusmask The following warning was triggered on a large machine early in boot on a distribution kernel but the same problem should also affect mainline. WARNING: CPU: 439 PID: ...
CVE-2023-5600
Removed by vendor...
CVE-2024-4994
CVE-2024-4994 describes a CSRF vulnerability in GitLab CE/EE affecting multiple release lines: 16.1.0–16.11.4, 17.0.x before 17.0.3, and 17.1.x before 17.1.1. The issue allows execution of arbitrary GraphQL mutations via CSRF on GitLabs GraphQL API. Mitigation is to upgrade to the fixed versions...
PT-2025-26251 · Powsybl · Powsybl
Name of the Vulnerable Software and Affected Versions: PowSyBl versions 6.3.0 through 6.7.1 Description: The issue is a deserialization problem in the read method of the SparseMatrix class, which can lead to various privilege escalations depending on the circumstances. This method takes an...
UBUNTU-CVE-2022-50008
In the Linux kernel, the following vulnerability has been resolved: kprobes: don't call disarmkprobe for disabled kprobes The assumption in disablekprobe is wrong, and it could try to disarm an already disarmed kprobe and fire the WARNONCE below. 0 We can easily reproduce this issue. 1. Write 0 t...
CVE-2022-50173 drm/msm/mdp5: Fix global state lock backoff
In the Linux kernel, the following vulnerability has been resolved: drm/msm/mdp5: Fix global state lock backoff We need to grab the lock after the early return for !hwpipe case. Otherwise, we could have hit contention yet still returned 0. Fixes an issue that the new CONFIGDRMDEBUGMODESETLOCK stu...
CVE-2022-49989 xen/privcmd: fix error exit of privcmd_ioctl_dm_op()
In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix error exit of privcmdioctldmop The error exit of privcmdioctldmop is calling unlockpages potentially with pages being NULL, leading to a NULL dereference. Additionally lockpages doesn't check for pinuserpagesfast...