Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.12.111 and prior to 6.18.53. This vulnerability arises because TXCMD response parsing fails to validate the minimum length based on the actual runtime layout; it uses framecount to iterate through status entries and reads the...

ffmpeg:ffmpeg_dem_SCD_fuzzer: Use-of-uninitialized-value in scd_read_table

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5328203515494400 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemSCDfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...

scd-jp.com Cross Site Scripting vulnerability OBB-3368371

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Gnupg2 '/scd/command.c' Double Free Denial of Service Vulnerability

GnuPG is a Python module that allows, from a Python program, to conveniently use the key management, encryption and signing features of GnuPG. A denial of service vulnerability exists in Gnupg2 '/scd/command.c', which can be exploited by an attacker to launch a denial of service attack...

promise webpam 2.2.0.13 - Multiple Vulnerabilities

No description provided by source. Promise WebPAM v2.2.0.13 Multiple Remote Vulnerabilities Vendor: Promise Technology, Inc. Product web page: http://www.promise.com Affected version: 2.2.0.13 Summary: WebPAM is a web based Promise Array Management Software that's easy-to use, designed to simplif...