197857 matches found
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability caused by a race condition issue, which may lead to reusing resources after release...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from a problem with the use of reclaimed resources in the unixstreambpfupdateproto function, which may lead to an increase in local privileges...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the drm/xe/dma-buf module not properly handling the release of objects during the retry loop, which may lead to reuse after release...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that stems from the incorrect number of bytes used during the recovery of the IV in the ccpaescomplete function, which can lead to a buffer overflow. The following versions are affected: 3.14...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from the NAT hook in the netfilter component failing to release ops through kfreercu at the wrong path, potentially causing issues when using dump hooks in the user space...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.13 contains security vulnerabilities. These vulnerabilities stem from the bonding driver’s improper implementation of RCU rules in 3ad mode, which may lead to data races...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability, which stems from an error in error handling within the xeexecqueuecreateioctl function. This vulnerability may lead to reuse after deallocation attacks...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the network layer’s improper handling of GSO packets, resulting in the failure to correctly retrieve header data. This can lead to the driver reading invalid memory, allowing attackers to trigger a denial-of-service...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.7 contains security vulnerabilities. These vulnerabilities stem from the fact that the open-coded taskvma iterator does not call mmget to obtain the mm reference. This can lead to the release of the mmstruct during task concurrency exits, resulting in a reuse after...
Linux Kernel Security Vulnerabilities
The Linux kernel versions from 6.12.34 to 6.12.74 contain security vulnerabilities. This vulnerability arises from the use of Threaded NAPI in WireGuard devices, which causes the decryption process to completely stop under high network load, potentially leading to a denial-of-service attack...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.17 contains security vulnerabilities. These vulnerabilities stem from the futex subsystem, which violates strict pthread semantics when handling private default hash allocations. The misuse of CLONETHREAD leads to issues where shared memory is reclaimed and reused after...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the crushdecode function in the libceph component. When processing CEPHMSGOSDMAP messages, if the crush map contains at least one bucket and the values of the two algorithm fields are inconsistent, it may lead to...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.15 contains security vulnerabilities. These vulnerabilities stem from SCTP’s improper handling of Stale Cookies, where it fails to properly clean up the output queue and invalidates the scheduler’s cache pointers, potentially leading to reuse after release...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.8 contains security vulnerabilities. These vulnerabilities stem from race conditions in the drm/xe/dma-buf code, which handle empty buffers and reusing after release. This could allow attackers to trigger reusing after release or null pointer dereferencing...
AOMedia libaom buffer error vulnerability
The AOMedia libaom vulnerability involves a buffer overflow issue, stemming from a heap buffer overflow in libaom. In the AV1 encoder’s Look-Ahead Processing LAP mode, when glaginframes is set to 1 or higher, the first-pass statistical loop bypasses the buffer protection around the loop. This...
AOMedia libaom buffer error vulnerability
The AOMedia libaom vulnerability involves a buffer overflow issue. This vulnerability stems from the lack of boundary checks in the SVC Scalable Video Coding layer ID control function. It allows for the setting of a spatiallayerid that exceeds the configured number of layers. This leads to...
AOMedia libaom buffer error vulnerability
AOMedia libaom has a security vulnerability. This vulnerability stems from the lack of boundary checks in the SVC layer ID control function. It allows attackers to inject arbitrary pointers into the loop refresh mapping field through carefully designed image pixel values, potentially leading to...
AOMedia libaom buffer error vulnerability
The AOMedia libaom vulnerability involves a buffer overflow issue. This vulnerability stems from insufficient boundary validation in the SVC layer ID control of the AV1 encoder. It allows attackers to overlap custom video frame pixels with the internal encoder layer’s context structure, thereby...
CyberArk Idira Privileged Session Manager path traversal vulnerability
CyberArk Idira Privileged Session Manager is a privileged session management platform developed by the American company CyberArk. Versions of CyberArk Idira Privileged Session Manager prior to 15.0.3, 14.6.3, 14.2.5, and 14.0.5 contained a path traversal vulnerability. This vulnerability stemmed...
MPEG-4 container plugin for Membrane Framework security vulnerabilities
The MPEG-4 container plugin for Membrane Framework is an open-source plugin developed by Membrane Framework for parsing and multiplexing MP4 containers. Versions of the MPEG-4 container plugin for Membrane Framework from 0.3.0 to 0.36.7 contained security vulnerabilities. These vulnerabilities...
Vim code injection vulnerability
Vim is an open-source, cross-platform text editor developed by Vim developers. Prior to Vim 9.2.0561, there was a code injection vulnerability. This vulnerability stemmed from the Python omni-completion script, which executed import and from statements in the current buffer through the Python...
OpenClaw security vulnerabilities
OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.5.12 contained security vulnerabilities. These vulnerabilities stemmed from shell option parsing; combining POSIX shell flags could bypass the exec revalidation check. Attackers c...
Google Chrome Resource Management Error Vulnerability
Google Chrome is a web browser developed by Google. It primarily provides features for web browsing, extension support, and multi-platform synchronization. There is a resource management vulnerability in Google Chrome. This vulnerability stems from the Cast component’s failure to properly handle...
Axios injection vulnerability
Axios is an open-source HTTP client developed by Axios. Versions of Axios from 1.15.2 to 1.16.0 had a injection vulnerability. This vulnerability stemmed from the lack of hasOwnProperty checks on nested objects created by the utils.merge function. This could lead to prototype pollution and...
Google Chrome Resource Management Error Vulnerability
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.115 contained a resource management vulnerability. This vulnerability stemmed from the reuse of resources after they were released in DigitalCredentials, which could allow a remote attacker with...
PostgreSQL Anonymizer SQL Injection Vulnerability
PostgreSQL Anonymizer is an open-source extension developed by DALIBO in France, designed to mask or replace personally identifiable information PII or commercially sensitive data in PostgreSQL databases. PostgreSQL Anonymizer has a SQL injection vulnerability. This vulnerability arises from...
GitLab Enterprise Edition (EE) Cross-Site Scripting Vulnerabilities
GitLab Enterprise Edition EE is a content management system provided by the American company GitLab. Versions of GitLab EE from 13.1.4 to 18.10.8, as well as versions from 18.11 to 18.11.5 and from 19.0 to 19.0.2, contained a cross-site scripting vulnerability. This vulnerability stemmed from...
tmp Path Traversal Vulnerability
“tmp” is a temporary file and directory creator developed by KARASZI István for Node.js developers. Versions of “tmp” prior to 0.2.6 had a path traversal vulnerability; this vulnerability could lead to files being created outside of the intended temporary directories due to path traversal...
Summary of code issues and vulnerabilities
Summarize is a multi-source rapid summarization tool developed by Peter Steinberger. Versions of Summarize prior to 0.17.0 contained code vulnerabilities. These vulnerabilities were caused by server-side request forgeing attacks. Attackers could exploit these vulnerabilities by providing maliciou...
openSIS Classic security vulnerabilities
openSIS Classic is an easy-to-use student information system developed under Open Solutions for Education. It is used to organize student information and school-related operations, thereby improving the efficiency of K-12, trade schools, and higher education school systems. Version 9.3 of openSIS...
OpenClaw security vulnerabilities
OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.5.6 contained security vulnerabilities. These vulnerabilities stemmed from authorization bypass in Telegram interaction callbacks, allowing authenticated users to bypass the...
Axios server-side request forge vulnerability
Axios is an open-source HTTP client developed by Axios, based on Promise a solution for asynchronous programming. There were code-related vulnerabilities in versions of Axios before 0.32.0 and 1.16.0. These vulnerabilities stemmed from unnormalized IPv4-to-Ipv6 address mappings, which could lead ...
Certificate handling for haskell security vulnerabilities
Certificate Handling for Haskell is a X509 certificate processing and verification tool developed by Kazu Yamamoto. There are security vulnerabilities in Certificate Handling for Haskell. These vulnerabilities stem from the lack of enforcement of X.509 name constraints. This may allow TLS clients...
IBM Langflow Desktop code-related vulnerabilities
IBM Langflow Desktop is a desktop application for AI process orchestration developed by IBM. Versions 1.0.0 to 1.9.2 of IBM Langflow Desktop have code vulnerabilities. These vulnerabilities are due to susceptibility to server-side request forgeing attacks, which may allow authenticated attackers ...
IBM Security QRadar EDR security vulnerabilities
IBM Security QRadar EDR is a terminal detection and response software developed by the American multinational company IBM. There are security vulnerabilities in versions 3.12 to 3.12.24 of IBM Security QRadar EDR. These vulnerabilities stem from the storage of user credentials in plain text, whic...
OpenClaw security vulnerabilities
OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.5.18 contained security vulnerabilities. These vulnerabilities stemmed from the fact that extension metadata during market runtime could be redirected to load into unscanned packa...
OpenClaw: Permissions, licensing, and access control issues
OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.5.20 contained security vulnerabilities. These vulnerabilities were caused by permission escalation issues, where hooks triggered proxy operations that incorrectly received MCP...
Apple’s various products have vulnerabilities related to access control.
Apple iOS, among others, are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple macOS is a specialized operating system designed for Mac computers. Apple iPadOS is an operating system for iPad tablets. Several of Apple’s products have...
Apple macOS Backlink Vulnerability
Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. Versions of Apple macOS Sequoia 15.4 and earlier contained a backlink vulnerability, which was caused by improper handling of symbolic links. This vulnerability could allow applications to...
Apple macOS Access Control Error Vulnerability
Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. Versions of Apple macOS Tahoe 26.1 and earlier contained an access control error vulnerability. This vulnerability stemmed from an access issue that could allow malicious applications to acces...
MCP Server Kubernetes security vulnerabilities
MCP Server Kubernetes is a Kubernetes management server developed by Suyog Sonwalkar. Versions of MCP Server Kubernetes prior to 3.6.0 contained security vulnerabilities. These vulnerabilities stemmed from access control being executed at the tool discovery layer but not at the execution layer,...
Quest Bot security vulnerabilities
Quest Bot is a multi-functional Discord community management robot developed by Duck Organization. Versions of Quest Bot prior to 1.0.3 contained security vulnerabilities. These vulnerabilities stemmed from users who had access to manage servers but did not have management roles or administrator...
389 Directory Server: Input validation error vulnerability
389 Directory Server is an open-source implementation of a highly available, fully functional, reliable, and secure LDAP server. 389 Directory Server has a vulnerability related to input validation. This vulnerability stems from an integer overflow in the SASL I/O layer. In the function...
Apple macOS security vulnerabilities
Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. Versions of Apple macOS Sequoia 15.4 had a security vulnerability due to improper handling of symbolic links, which could allow applications to access protected user data...
Apple macOS security vulnerabilities
Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. Versions of Apple macOS Sequoia 15.4 had a security vulnerability due to insufficient checks. This vulnerability could allow applications to bypass startup restriction protections and execute...
Hermes Web UI Access Control Vulnerability
Hermes Web UI is a lightweight, dark-themed web interface developed by Nathan Esquenazi. Versions of Hermes Web UI prior to 0.51.358 contained an access control vulnerability. This vulnerability stemmed from improper access control measures, allowing unauthorized remote attackers to initial...
CyberArk Idira Secrets Manager SaaS Edge Access Control Vulnerability
CyberArk Idira Secrets Manager SaaS Edge is a distributed confidential access node component offered by the American company CyberArk. Versions of CyberArk Idira Secrets Manager SaaS Edge prior to version 1.8 contained an access control vulnerability. This vulnerability stemmed from improper acce...
CyberArk Idira Endpoint Privilege Manager security vulnerability
CyberArk Idira Endpoint Privilege Manager is a terminal privilege management agent developed by the American company CyberArk. Vulnerabilities existed in versions of CyberArk Idira Endpoint Privilege Manager prior to version 26.5. These vulnerabilities stemmed from improper access control in the...
Kong Gateway Enterprise environmental issues and vulnerabilities
Kong Gateway Enterprise is an enterprise-level API gateway platform developed by Kong Corporation. Versions 3.4, 3.10, 3.11, 3.12, 3.13, and 3.14 of Kong Gateway Enterprise contain environmental issues vulnerabilities. These vulnerabilities stem from defects in the HTTP request processing pipelin...
Limatek LimRAD NAC code issue vulnerability
Limatek LimRAD NAC is a network access control system developed by the Turkish company Limatek. Versions of Limatek LimRAD NAC prior to 5.5.7.3.9 contained code vulnerabilities. These vulnerabilities stemmed from an unlimited upload of dangerous types of files, which could lead to remote code...