92 matches found
CVE-2025-9998 Improper validation of packets sequencing
The sequence of packets received by a Networking server are not correctly checked. An attacker could exploit this vulnerability to send specially crafted messages to force the application to stop...
CVE-2025-9998
CVE-2025-9998 describes an issue where the sequence of packets received by a Networking server is not correctly checked, enabling a potential denial-of-service via specially crafted messages to force the application to stop. Multiple sources (NVD, Red Hat, CVE.org, CIRCL, VulnEnrichment) corrobor...
CVE-2025-9998 Improper validation of packets sequencing
The sequence of packets received by a Networking server are not correctly checked. An attacker could exploit this vulnerability to send specially crafted messages to force the application to stop...
drm/amd/display: Wake DMCUB before sending a command
...
CVE-2025-38596 drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code
In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF in panthorgemcreatewithhandle debugfs code The object is potentially already gone after the drmgemobjectput. In general the object should be fully constructed before calling drmgemhandlecreate, except the...
SUSE CVE-2025-38546
In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix memory leak of struct clipvcc. ioctlATMARPMKIP allocates struct clipvcc and set it to vcc-userback. The code assumes that vccdestroysocket passes NULL skb to vcc-push when the socket is closed, and then clippush...
Security update for kernel-livepatch-MICRO-6-0_Update_4
This update for kernel-livepatch-MICRO-6-0Update4 fixes the following issues: CVE-2024-53146: NFSD: prevent a potential integer overflow bsc1234854 CVE-2024-53166: block, bfq: fix bfqq uaf in bfqlimitdepth bsc1234885 CVE-2024-53173: NFSv4.0: Fix a use-after-free problem in the asynchronous open...
Security update for kernel-livepatch-MICRO-6-0-RT_Update_2
This update for kernel-livepatch-MICRO-6-0-RTUpdate2 fixes the following issues: CVE-2024-50208: RDMA/bnxtre: Fix a bug while setting up Level-2 PBL pages bsc1233118 CVE-2024-50250: fsdax: daxunshareiter needs to copy entire blocks bsc1233227 CVE-2024-53146: NFSD: prevent a potential integer...
Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122228 fixes several issues. The following security issues were fixed: CVE-2024-53146: NFSD: Prevent a potential integer overflow bsc1234854. CVE-2022-49465: blk-throttle: Set BIOTHROTTLED when bio has been throttled bsc1238920. CVE-2024-53214: vfio/pci:...
DEBIAN-CVE-2025-38136
In the Linux kernel, the following vulnerability has been resolved: usb: renesasusbhs: Reorder clock handling and power management in probe Reorder the initialization sequence in usbhsprobe to enable runtime PM before accessing registers, preventing potential crashes due to uninitialized clocks...
CVE-2019-15568
idseq-web before 2019-07-01 in Infectious Disease Sequencing Platform IDseq allows SQL injection via taxlevels...
The vulnerability of the f2fs component of the Linux operating system’s kernel allows a hacker to compromise data integrity.
The vulnerability of the f2fs component of the Linux operating system’s kernel is related to the incorrect implementation of the sequence of actions to be performed. Exploiting this vulnerability can allow an attacker to compromise data integrity...
The vulnerability of the integrated data streaming accelerator Intel Data Streaming Accelerator (Intel DSA), a microprogramming-based software component of Intel processors, arises due to incorrect sequence of processor instructions. This vulnerability allows attackers to trigger a system failure.
The vulnerability of the integrated data streaming accelerator Intel Data Streaming Accelerator Intel DSA in Intel microcomputer software is related to incorrect sequence of processor instructions. Exploiting this vulnerability can allow attackers to cause system failures...
PT-2024-18880 · Qualcomm · Snapdragon +19
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs when a compat IOCTL call is followed by another IOCTL call from userspace to a driver. This can lead to...
AZL-48057 CVE-2024-41085 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: cxl/mem: Fix no cxlnvd during pmem region auto-assembling When CXL subsystem is auto-assembling a pmem region during cxl endpoint port probing, always hit below calltrace. BUG: kernel NULL pointer dereference, address:...
Predictable TCP ISNs in EDK II Network Package
...
CVE-2023-31803
Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the resource sequencing parameters...
Cross site scripting
Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the resource sequencing parameters...
CVE-2023-31803: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the resource sequencing parameters...