3409 matches found
CVE-2021-47654
In the Linux kernel, the following vulnerability has been resolved: samples/landlock: Fix pathlist memory leak Clang static analysis reports this error sandboxer.c:134:8: warning: Potential leak of memory pointed to by 'pathlist' ret = 0; ^ pathlist is allocated in parsepath but never freed...
CVE-2021-47659
In the Linux kernel, the following vulnerability has been resolved: drm/plane: Move range check for formatcount earlier While the check for formatcount 64 in drmuniversalplaneinit shouldn't be hit it's a WARNON, in its current position it will then leak the plane-formattypes array and fail to cal...
CVE-2021-47631
In the Linux kernel, the following vulnerability has been resolved: ARM: davinci: da850-evm: Avoid NULL pointer dereference With newer versions of GCC, there is a panic in da850evmconfigemac when booting multiv5defconfig in QEMU under the palmetto-bmc machine: Unable to handle kernel NULL pointer...
CVE-2021-47657
In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Ensure that objs is not NULL in virtiogpuarrayputfree If virtiogpuobjectshmeminit fails e.g. due to fault injection, as it happened in the bug report by syzbot, virtiogpuarrayputfree could be called with objs equal to...
ROS-20250226-08
A vulnerability in the OpenJPEG image encoding and decoding library is related to memory boundary errors. memory boundary errors. Exploitation of the vulnerability could allow an attacker to execute arbitrary code A vulnerability in the OpenJPEG image encoding and decoding library is related to a...
CVE-2025-27148
Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. On Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. This library initialization could be...
CVE-2025-21627
GLPI is a free asset and IT management software package. In versions prior to 10.0.18, a malicious link can be crafted to perform a reflected XSS attack on the search page. If the anonymous ticket creation is enabled, this attack can be performed by an unauthenticated user. Version 10.0.18 contai...
CVE-2025-1176 affecting package binutils for versions less than 2.41-3
CVE-2025-1176 affecting package binutils for versions less than 2.41-3. A patched version of the package is available...
GHSA-F73R-7G7H-494M vulnerabilities
Vulnerabilities for packages: gitlab-pages, gitlab-cng...
GHSA-VP7M-M4V3-GXC5 vulnerabilities
Vulnerabilities for packages: openjdk...
GHSA-8JGF-8R3G-HXH8 vulnerabilities
Vulnerabilities for packages: haproxy...
GHSA-X774-V4VM-3H8M vulnerabilities
Vulnerabilities for packages: gitlab-pages, gitlab-cng...
GHSA-XC82-5M89-G4JV vulnerabilities
Vulnerabilities for packages: go, kubeflow-katib, kind...
GHSA-QP3J-RXH4-Q4H8 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-G9M4-VFQ7-W439 vulnerabilities
Vulnerabilities for packages: ghostscript...
GHSA-M77W-6VJW-WH2F vulnerabilities
Vulnerabilities for packages: glibc...
GHSA-QF54-2QX8-3VCV vulnerabilities
Vulnerabilities for packages: exim, libspf2...
GHSA-HJ65-9WFC-JMF4 vulnerabilities
Vulnerabilities for packages: firefox...