16951 matches found
CVE-2022-49182 net: hns3: add vlan list lock to protect vlan list
In the Linux kernel, the following vulnerability has been resolved: net: hns3: add vlan list lock to protect vlan list When adding port base VLAN, vf VLAN need to remove from HW and modify the vlan state in vf VLAN list as false. If the periodicity task is freeing the same node, it may cause "use...
CVE-2022-49113 powerpc/secvar: fix refcount leak in format_show()
In the Linux kernel, the following vulnerability has been resolved: powerpc/secvar: fix refcount leak in formatshow Refcount leak will happen when formatshow returns failure in multiple cases. Unified management of ofnodeput can fix this problem...
Denial Of Service (DoS)
Libming is vulnerable to Denial Of Service DoS. The vulnerability is due to memory leaks in the clip actions parsing functions and by missing proper memory deallocation in parseSWFCLIPACTIONS and parseSWFCLIPACTIONRECORD when processing crafted SWF files, allowing an attacker to exhaust system...
Denial Of Service (DoS)
libming.so is vulnerable to Denial Of Service DoS. The vulnerability is due to a memory leak in the parseSWFFILTERLIST function in util/parser.c and by improper memory management when processing crafted SWF files, allowing attackers to exhaust system memory and trigger a denial of service...
The vulnerability of the software products of the LLC “NPO ‘MIR’ lies in the insufficient limitation on the number of authentication attempts, allowing a perpetrator to carry out an attack using brute-force methods.
The vulnerability of the software products developed by LLC “NPO ‘MIR’ lies in the insufficient limitation on the number of authentication attempts. Exploiting this vulnerability allows a malicious actor to carry out an attack using brute-force methods...
PT-2025-8729
Name of the Vulnerable Software and Affected Versions jq version 1.7.1 Description The issue is related to a stack-buffer-overflow in the decNumberCopy function within decNumber.c. Recommendations For jq version 1.7.1, at the moment, there is no information about a newer version that contains a f...
The vulnerability of the software products developed by LLC “NPO ‘MIR’ lies in the fact that confidential information is stored in unencrypted form in memory, allowing an intruder to gain unauthorized access to the protected information.
The vulnerability of the software products developed by LLC “NPO ‘MIR’ lies in the storage of confidential information in unencrypted form in memory. Exploiting this vulnerability could allow an intruder to gain unauthorized access to the protected information...
The vulnerability of the software products of the LLC “NPO ‘MIR’, related to the use of cryptographic algorithms containing defects, allows attackers to execute an attack using brute-force methods.
The vulnerability of the software products developed by LLC “NPO ‘MIR’ lies in the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability allows a remote attacker to execute an attack using brute-force methods...
Beckman Coulter MET ONE 3400+ instruments running software 安全漏洞
Beckman Coulter MET ONE 3400+ instruments running software is a software for MET ONE 3400 + instruments running from Beckman Coulter, USA. SOP programs can be customized to automate cleanroom monitoring. Beckman Coulter MET ONE 3400+ instruments running software A security vulnerability exists in...
The vulnerability of the software products of the LLC “NPO ‘MIR’, related to incorrect authorization, allows a perpetrator to increase their privileges.
The vulnerability of the software products developed by OOO “NPO “MIR” is related to incorrect authorization. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the software products of the LLC “NPO ‘MIR’, related to weak password requirements, allows attackers to execute a brute-force attack.
The vulnerability of the software products developed by LLC “NPO ‘MIR’ is related to weak password requirements. Exploiting this vulnerability allows a malicious actor to carry out an attack using brute-force methods...
CVE-2025-22631
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in vbout Marketing Automation marketing-automation allows Reflected XSS.This issue affects Marketing Automation: from n/a through = 1.2.6.8...
CVE-2025-0514
A flaw was found in LibreOffice. LibreOffice has a feature where CTRL+click can activate hyperlinks in a document. In Windows systems, the link can be passed to the system ShellExecute function for handling. LibreOffice uses a mechanism to block paths to executable targets to ShellExecute to avoi...
CVE-2025-25192 GLPI allows unauthorized access to debug mode
GLPI is a free asset and IT management software package. Prior to version 10.0.18, a low privileged user can enable debug mode and access sensitive information. Version 10.0.18 contains a patch. As a workaround, one may delete the install/update.php file...
GHSA-C3P4-VM8F-386P Navidrome allows an authentication bypass in Subsonic API with non-existent username
Summary In certain Subsonic API endpoints, authentication can be bypassed by using a non-existent username combined with an empty salted password hash. This allows read-only access to the server’s resources, though attempts at write operations fail with a “permission denied” error. Details A flaw...
CVE-2025-23046 GLPI vulnerable to unauthorized authentication by email using the OAuthIMAP plugin
GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.18, if a "Mail servers" authentication provider is configured to use an Oauth connection provided by the OauthIMAP plugin, anyone can connect to GLPI using a user name on which an Oauth...
CVE-2025-26595 Xorg: xwayland: buffer overflow in xkbvmodmasktext()
A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size...
CVE-2025-26594 X.org: xwayland: use-after-free of the root cursor
A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If a client frees the root cursor, the internal reference points to freed memory and causes a use-after-free...
