Lucene search
+L

88 matches found

OSV
OSV
•added 2025/08/16 12:15 p.m.•35 views

AZL-66362 CVE-2025-38531 affecting package kernel for versions less than 6.6.137.1-2

In the Linux kernel, the following vulnerability has been resolved: iio: common: stsensors: Fix use of uninitialize device structs Throughout the various probe functions &indiodev-dev is used before it is initialized. This caused a kernel panic in stsensorspowerenable when the call to...

5.5CVSS5.8AI score0.00159EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/16 11:12 a.m.•38 views

CVE-2025-38531 iio: common: st_sensors: Fix use of uninitialize device structs

In the Linux kernel, the following vulnerability has been resolved: iio: common: stsensors: Fix use of uninitialize device structs Throughout the various probe functions &indiodev-dev is used before it is initialized. This caused a kernel panic in stsensorspowerenable when the call to...

0.00159EPSS
SaveExploits0References4
OSV
OSV
•added 2025/08/16 11:12 a.m.•12 views

CVE-2025-38531 iio: common: st_sensors: Fix use of uninitialize device structs

In the Linux kernel, the following vulnerability has been resolved: iio: common: stsensors: Fix use of uninitialize device structs Throughout the various probe functions &indiodev-dev is used before it is initialized. This caused a kernel panic in stsensorspowerenable when the call to...

5.9AI score
SaveExploits0References7
attackerkb
attackerkb
•added 2025/08/16 11:12 a.m.•111 views

CVE-2025-38531

In the Linux kernel, the following vulnerability has been resolved: iio: common: stsensors: Fix use of uninitialize device structs Throughout the various probe functions dev-dev is used before it is initialized. This caused a kernel panic in stsensorspowerenable when the call to...

5.5CVSS5.3AI score0.00159EPSS
SaveExploits0References5Affected Software1
CVE
CVE
•added 2025/08/16 11:12 a.m.•95 views

CVE-2025-38531

CVE-2025-38531 affects the Linux kernel IIO common/st_sensors code. The issue arises from using uninitialized indio_dev->dev in probe paths, which can trigger a kernel panic in st_sensors_power_enable() when devm_regulator_bulk_get_enable() fails and later calls dev_err_probe() with an uniniti...

5.5CVSS6.3AI score0.00159EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/08/12 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2024-37298

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running schema.Decoder.Decode on a struct that has a field of type struct... ope...

7.5CVSS6.9AI score0.01096EPSS
SaveExploits0References3
OSV
OSV
•added 2025/05/09 12:00 p.m.•26 views

CLSA-2025-1746792031 golang: Fix of 2 CVEs

CVE-2024-34156: prevent prevents stack exhaustion when attempting to decode a message that contains an extremely deeply nested struct - CVE-2023-45287: replace big.Int for encryption and decryption...

7.5CVSS6.9AI score0.0125EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2024/08/20 4:11 p.m.•21 views

gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization

A flaw was found in the gorilla/schema package. Running schema.Decoder.Decode on a struct that has a field of type struct... opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of schema.Decoder.Decode on a struct with arrays ...

7.5CVSS7.3AI score0.01096EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2024/08/19 3:55 a.m.•13 views

gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization

A flaw was found in the gorilla/schema package. Running schema.Decoder.Decode on a struct that has a field of type struct... opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of schema.Decoder.Decode on a struct with arrays ...

7.5CVSS7.3AI score0.01096EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
•added 2024/08/17 10:15 a.m.•19 views

CVE-2024-43827

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check before access structs In enablephantomplane, we should better check null pointer before accessing various structs...

5.5CVSS6.3AI score0.00193EPSS
SaveExploits0References9
Debian CVE
Debian CVE
•added 2024/08/17 9:21 a.m.•59 views

CVE-2024-43827

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check before access structs In enablephantomplane, we should better check null pointer before accessing various structs...

5.5CVSS5.5AI score0.00193EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2024/08/07 1:32 p.m.•11 views

gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization

A flaw was found in the gorilla/schema package. Running schema.Decoder.Decode on a struct that has a field of type struct... opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of schema.Decoder.Decode on a struct with arrays ...

7.5CVSS7.3AI score0.01096EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2024/07/24 12:58 p.m.•13 views

gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization

A flaw was found in the gorilla/schema package. Running schema.Decoder.Decode on a struct that has a field of type struct... opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of schema.Decoder.Decode on a struct with arrays ...

7.5CVSS7.3AI score0.01096EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2024/07/10 12:00 a.m.•11 views

The vulnerability of the Jenkins Structs Plugin, related to the disclosure of information through registration files, allows a perpetrator to gain unauthorized access to the protected information.

The vulnerability of the Jenkins Structs Plugin is related to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

3.1CVSS5.9AI score0.00439EPSS
SaveExploits0References4Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/07/03 5:04 p.m.•9 views

Malicious code in sol-structs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6d466f5d94859498aa97e45fc82060c447a3004b4ea16e620a3fcc58ed8cfb3e --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: spl-types-rentry-2024-07 Reasons based on the campaign: -...

7AI score
SaveExploits0References4
OSV
OSV
•added 2024/07/03 5:04 p.m.•29 views

MAL-2024-10161 Malicious code in sol-structs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6d466f5d94859498aa97e45fc82060c447a3004b4ea16e620a3fcc58ed8cfb3e --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: spl-types-rentry-2024-07 Reasons based on the campaign: -...

6.9AI score
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2024/07/03 3:17 a.m.•7 views

SUSE CVE-2024-37298

gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running schema.Decoder.Decode on a struct that has a field of type struct... opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of...

7.5CVSS8.7AI score0.01096EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2024/07/01 8:35 p.m.•34 views

Potential memory exhaustion attack due to sparse slice deserialization

Details Running schema.Decoder.Decode on a struct that has a field of type struct... opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. For instance, in the Proof of Concept written below, someone can specify to set a field of the...

7.5CVSS7.2AI score0.01096EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2024/07/01 7:15 p.m.•16 views

AZL-43146 CVE-2024-37298 affecting package telegraf for versions less than 1.29.4-7

gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running schema.Decoder.Decode on a struct that has a field of type struct... opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of...

7.5CVSS6.5AI score0.01096EPSS
SaveExploits0References1
OSV
OSV
•added 2024/07/01 7:15 p.m.•5 views

DEBIAN-CVE-2024-37298

gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running schema.Decoder.Decode on a struct that has a field of type struct... opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of...

7.5CVSS6.2AI score0.01096EPSS
SaveExploits0References1
Rows per page
Query Builder