Lucene search
+L

6 matches found

Cvelist
Cvelist
added 2025/12/30 12:3 p.m.32 views

CVE-2022-50785 fsi: occ: Prevent use after free

In the Linux kernel, the following vulnerability has been resolved: fsi: occ: Prevent use after free Use getdevice and putdevice in the open and close functions to make sure the device doesn't get freed while a file descriptor is open. Also, lock around the freeing of the device buffer and check...

7.8CVSS0.0012EPSS
SaveExploits0References3
CVE
CVE
added 2025/12/30 12:3 p.m.35 views

CVE-2022-50785

CVE-2022-50785 is a Linux kernel use-after-free bug in the fsi occ driver. The issue could allow freeing a device while a file descriptor is open. Fixed by adding get_device/put_device in the open/close paths, ensuring the device isn’t freed during an active descriptor, and by locking around the ...

7.8CVSS6.3AI score0.0012EPSS
SaveExploits0References3
OSV
OSV
added 2025/03/14 10:15 p.m.6 views

CVE-2025-2320

A vulnerability has been found in 274056675 springboot-openai-chatgpt e84f6f5 and classified as critical. Affected by this vulnerability is the function submit of the file /api/blade-user/submit of the component User Handler. The manipulation leads to improper authorization. The attack can be...

9.8CVSS5.4AI score0.00638EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2024/12/25 12:0 a.m.11 views

The vulnerability of DRM/MSM components in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the DRM/MSM components in the Linux operating system is related to the assignment of the NULL pointer in the msmioctlgemsubmit function. Exploiting this vulnerability can allow a hacker to trigger a service failure...

5.5CVSS5.9AI score0.00191EPSS
SaveExploits0References9Affected Software2
Veracode
Veracode
added 2023/05/29 2:46 a.m.19 views

Cross-site Scripting (XSS)

SSCMS is vulnerable to Cross-site Scripting XSS. The vulnerability exists because of the improper sanitization in the ajaxDivId argument in the Submit function of ActionsSearchController.Submit.cs, which allows an attacker to inject and execute malicious javascript through the...

6.1CVSS6.6AI score0.00561EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2022/01/01 12:0 a.m.5 views

PT-2025-53925

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free issue within the FSI file system interface component, specifically related to the occ functionality. The issue occurs because the device could ...

4.6CVSS6.4AI score0.0012EPSS
SaveExploits0References18
Rows per page
Query Builder