Lucene search
K

8 matches found

Positive Technologies
Positive Technologies
added 2026/03/16 12:0 a.m.4 views

PT-2026-25852

Name of the Vulnerable Software and Affected Versions SiYuan versions 3.6.0 and below Description SiYuan, a personal knowledge management system, has an issue in the globalCopyFiles API. This API reads source files using filepath.Abs without proper workspace boundary checks. It relies on the...

6.8CVSS5.9AI score0.00095EPSS
Exploits1References9
Tenable Nessus
Tenable Nessus
added 2026/01/14 12:0 a.m.1 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001245)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001245 advisory. A flaw was found affecting the Linux kernel before version 4.17. By mmaping a FUSE-backed file onto a process's memory containing command line arguments or environme...

5.3CVSS6.3AI score0.0144EPSS
Exploits5References18
Tenable Nessus
Tenable Nessus
added 2026/01/14 12:0 a.m.1 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000621)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000621 advisory. Race condition in the environread function in fs/proc/base.c in the Linux kernel before 4.5.4 allows local users to obtain sensitive information from kernel memory b...

5.5CVSS7AI score0.00053EPSS
Exploits0References12
NVD
NVD
added 2016/11/16 5:59 a.m.18 views

CVE-2016-7916

Race condition in the environread function in fs/proc/base.c in the Linux kernel before 4.5.4 allows local users to obtain sensitive information from kernel memory by reading a /proc//environ file during a process-setup time interval in which environment-variable copying is incomplete...

5.5CVSS5.2AI score0.00053EPSS
Exploits0References9
OSV
OSV
added 2016/11/16 5:59 a.m.1 views

DEBIAN-CVE-2016-7916

Race condition in the environread function in fs/proc/base.c in the Linux kernel before 4.5.4 allows local users to obtain sensitive information from kernel memory by reading a /proc//environ file during a process-setup time interval in which environment-variable copying is incomplete...

5.5CVSS6.3AI score0.00053EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2016/11/15 7:36 p.m.2 views

kernel: Stack overflow via ecryptfs and /proc/$pid/environ

It was found that stacking a file system over procfs in the Linux kernel could lead to a kernel stack overflow due to deep nesting, as demonstrated by mounting ecryptfs over procfs and creating a recursion by mapping /proc/environ. An unprivileged, local user could potentially use this flaw to...

7.8CVSS7.1AI score0.00424EPSS
Exploits2References4
RedHat Linux
RedHat Linux
added 2016/10/28 9:28 a.m.2 views

kernel: Stack overflow via ecryptfs and /proc/$pid/environ

It was found that stacking a file system over procfs in the Linux kernel could lead to a kernel stack overflow due to deep nesting, as demonstrated by mounting ecryptfs over procfs and creating a recursion by mapping /proc/environ. An unprivileged, local user could potentially use this flaw to...

7.8CVSS7.1AI score0.00424EPSS
Exploits2References4
RedHat Linux
RedHat Linux
added 2006/08/22 6:39 p.m.4 views

security flaw

Race condition in Linux kernel 2.6.17.4 and earlier allows local users to gain root privileges by using prctl with PRSETDUMPABLE in a way that causes /proc/self/environ to become setuid root...

6.2CVSS5.8AI score0.00075EPSS
Exploits1References4
Rows per page
Query Builder