13092 matches found
GSD-2023-1000547 iio: fix memory leak in iio_device_register_eventset()
iio: fix memory leak in iiodeviceregistereventset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...
GSD-2023-1000517 drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid()
drm/sti: Fix return type of stidvo,hda,hdmiconnectormodevalid This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...
GSD-2023-1000397 ext4: init quota for 'old.inode' in 'ext4_rename'
ext4: init quota for 'old.inode' in 'ext4rename' This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...
GSD-2023-1000356 HID: core: fix shift-out-of-bounds in hid_report_raw_event
HID: core: fix shift-out-of-bounds in hidreportrawevent This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.302 by commit...
GSD-2023-1000094 net/mlx5e: Fix use-after-free when reverting termination table
net/mlx5e: Fix use-after-free when reverting termination table This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...
CVE-2022-4121
In libetpan a null pointer dereference in mailimapmailboxdatastatusfree in low-level/imap/mailimaptypes.c was found that could lead to a remote denial of service or other potential consequences...
PT-2023-34110 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue is related to a shift-out-of-bounds in check special flags. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...
DLA-3270-1 net-snmp - security update
Bulletin has no description...
Publify Improper Input Validation vulnerability
Improper Input Validation in GitHub repository publify/publify prior to 9.2.10...
SQL Injection
salesforce.sdk.core is vulnerable to SQL injection. The vulnerability exists in QuerySpec.cs because the user provided inputs for are not properly validated which allows an attacker to inject and execute malicious SQL queries in the system...
Zip4j Origin Validation Error
Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive. This issue has been fixed in version 2.11.3...
ADC /13.0 / renew certificates
Assist in cases of clients who need to renew a certificate that is about to expire...
Prototype Pollution
tree-kit is vulnerable to prototype pollution. The vulnerability exists in the op function of browser/tree-kit.js, due to the improper checks for the key variable which allows an attacker to modify object prototype attributes...
PT-2023-12371 · Hewlett Packard · Hpe
Name of the Vulnerable Software and Affected Versions: HPE affected versions not specified Description: The issue concerns a vulnerability that was initially assigned a CVE number but was unused by HPE. The details of this issue are available via the National Vulnerability Database...
CVE-2022-47660
GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is has an integer overflow in isomedia/isomwrite.c...
CVE-2023-0049 Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143...
PT-2023-13675 · Unknown · Aenrich A+Hrd
Name of the Vulnerable Software and Affected Versions: aEnrich a+HRD affected versions not specified Description: The issue is related to improper validation for the login function. An unauthenticated remote attacker can exploit this to bypass authentication and access API functions, allowing the...
FortiADC - command injection in web interface
An improper neutralization of special elements used in an OS Command vulnerability CWE-78 in FortiADC may allow an authenticated attacker with access to the web GUI to execute unauthorized code or commands via specifically crafted HTTP requests...