963 matches found
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the lack of the AMLNOOPERANDRESOLVE flag in the ASL Timer directive, which could lead to out-of-bounds acces...
An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.
...
Linux Distros Unpatched Vulnerability : CVE-2021-44568
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Two heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the decisionmap variable via the resolvedependencies function at...
Server-side Request Forgery (SSRF)
Overview next is a react framework. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the resolve-routes. An attacker can access internal resources and potentially exfiltrate sensitive information by crafting requests containing user-controlled headers e.g.,...
ROS-20250827-03
A vulnerability in the resolveFile method of the Apache Commons VFS Virtual File System unified API for accessing different file systems is due to errors in the relative path handling of the directory when processing the relative path of the directory. Virtual File System method is related to...
Linux Distros Unpatched Vulnerability : CVE-2024-57255
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow in sqfsresolvesymlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with an inode size of 0xffffffff, resulting ...
brick (=0.0.0), duo-parse (=0.4.0) +4 more potentially affected by unknown CVE via memoize-sync (>=0.0.2 <=2.0.0)
memoize-sync NPM version =0.0.2, =0.0.9, =5.0.0, =3.0.0, =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26179...
Malicious code in balance-rho-resolve-alpha-uglify (npm)
The package balance-rho-resolve-alpha-uglify was found to contain malicious code...
Malicious code in compile-dog-resolve-java-slow (npm)
The package compile-dog-resolve-java-slow was found to contain malicious code...
Malicious code in resolve-upsilon-integer-resolve-balance (npm)
The package resolve-upsilon-integer-resolve-balance was found to contain malicious code...
Malicious code in log-zeta-resolve-index-module (npm)
The package log-zeta-resolve-index-module was found to contain malicious code...
Malicious code in scale-cache-resolve-file-wind (npm)
The package scale-cache-resolve-file-wind was found to contain malicious code...
MAL-2025-25522 Malicious code in log-zeta-resolve-index-module (npm)
The package log-zeta-resolve-index-module was found to contain malicious code...
MAL-2025-27878 Malicious code in nu-tree-test-resolve-phi (npm)
The package nu-tree-test-resolve-phi was found to contain malicious code...
MAL-2025-17162 Malicious code in cloud-object-new-resolve-grid (npm)
The package cloud-object-new-resolve-grid was found to contain malicious code...
MAL-2025-34158 Malicious code in sudo-resolve-deserialize-file-cloud (npm)
The package sudo-resolve-deserialize-file-cloud was found to contain malicious code...
Malicious code in resolve-sandbox-export-daemon-gamma (npm)
The package resolve-sandbox-export-daemon-gamma was found to contain malicious code...
MAL-2025-32131 Malicious code in resolve-upsilon-integer-resolve-balance (npm)
The package resolve-upsilon-integer-resolve-balance was found to contain malicious code...