36717 matches found
PT-2026-24219
A vulnerability has been identified in SICAM SIAPP SDK All versions V2.1.7. An out-of-bounds write vulnerability exists in SICAM SIAPP SDK. This could allow an attacker to write data beyond the intended buffer, potentially leading to denial of service, or arbitrary code execution...
The vulnerability of the af_alg_sendmsg() function in the crypto/af_alg.c module of the Linux kernel’s cryptographic subsystem allows a hacker to induce a service failure.
The vulnerability of the afalgsendmsg function in the crypto/afalg.c module of the Linux kernel’s cryptographic subsystem is related to the improper disabling or release of resources. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Giflib 安全漏洞
Giflib is an open-source library and utility for processing GIFs in OpenEuler. Giflib has a security vulnerability, which stems from improper error handling and shallow copying in GifMakeSavedImage, potentially leading to double release of resources...
The vulnerability of the d_alloc_parallel() function in the fs/dcache.c module of the Linux kernel file system allows a attacker to cause a service failure.
The vulnerability of the dallocparallel function in the fs/dcache.c module of the Linux kernel’s file system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the set_current_kprobe() function in the arch/x86/kernel/kprobes/core.c module, which is part of the Linux operating system’s x86 kernel support, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the setcurrentkprobe function in the arch/x86/kernel/kprobes/core.c module, which is part of the Linux operating system’s x86 kernel support, relates to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to compromise the...
CVE-2026-28433 Misskey lacks resource ownership validation
Misskey is an open source, federated social media platform. All Misskey servers running versions 10.93.0 and later, but prior to 2026.3.1, contain a vulnerability that allows importing other users' data due to lack of ownership validation. The impact of this vulnerability is estimated to be...
OpenClaw: system.run allow-always persistence included shell-commented payload tails
OpenClaw's system.run allowlist analysis did not honor POSIX shell comment semantics when deriving allow-always persistence entries. A caller in security=allowlist mode who received an allow-always decision could submit a shell command whose tail was commented out at runtime, for example by using...
Insufficiently Protected Credentials
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the fetchWithSsrFGuard process. An attacker can obtain sensitive authorization credentials by triggering a cross-origin redirect that causes custo...
OpenClaw's system.run allowlist approval parsing missed PowerShell encoded-command wrappers
OpenClaw's system.run shell-wrapper detection did not recognize PowerShell -EncodedCommand forms as inline-command wrappers. In allowlist mode, a caller with access to system.run could invoke pwsh or powershell using -EncodedCommand, -enc, or -e, and the request would fall back to plain argv...
Use of GET Request Method With Sensitive Query Strings
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Use of GET Request Method With Sensitive Query Strings via the process that appends authentication material to the browser URL query string and persists it in browser localStorage. An...
EUVD-2025-208441
An issue pertaining to CWE-78: Improper Neutralization of Special Elements used in an OS Command was discovered in linagora Twake v2023.Q1.1223...
EUVD-2025-208427
An issue pertaining to CWE-319: Cleartext Transmission of Sensitive Information was discovered in Nexusoft NexusInterface v3.2.0-beta.2...
CVE-2025-30204 affecting package cf-cli for versions less than 8.4.0-27
CVE-2025-30204 affecting package cf-cli for versions less than 8.4.0-27. A patched version of the package is available...
CVE-2026-25068 affecting package alsa-lib for versions less than 1.2.6.1-3
CVE-2026-25068 affecting package alsa-lib for versions less than 1.2.6.1-3. A patched version of the package is available...
CVE-2025-11065 affecting package kubevirt for versions less than 0.59.0-38
CVE-2025-11065 affecting package kubevirt for versions less than 0.59.0-38. A patched version of the package is available...
CVE-2025-39772 affecting package kernel for versions less than 5.15.200.1-1
CVE-2025-39772 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-47911 affecting package helm for versions less than 3.14.2-10
CVE-2025-47911 affecting package helm for versions less than 3.14.2-10. A patched version of the package is available...
CVE-2025-47911 affecting package cri-tools for versions less than 1.29.0-9
CVE-2025-47911 affecting package cri-tools for versions less than 1.29.0-9. A patched version of the package is available...