28326 matches found
Uncontrolled Recursion leading to Denial of Service in protobuf-javascript (google-protobuf)
...
http-cache-semantics through 4.2.0 Cross-Client Cache Disclosure via Vary Wildcard
...
http-cache-semantics through 4.2.0 Cross-User Cache Disclosure via max-stale
...
braces through 3.0.3 Stack Overflow via Deeply Nested Patterns
...
source-map-js through 1.2.1 Event Loop Denial of Service
...
DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM
...
Libslirp: libslirp: heap buffer overflow in dhcpv6/tftp response builders on small interface mtu
...
rustls-webpki before 0.103.13 Panic via empty BIT STRING
...
rustls webpki Name Constraints URI Validation Bypass
...
rustls-webpki before 0.103.10 CRL Revocation Check Bypass
...
rustls webpki 0.101.0 before 0.103.12 Name Constraint Bypass
...
Integer overflow causes an infinite loop in packet buffer growth in PgBouncer
...
NULL pointer dereference in SCRAM client-final-message parsing in PgBouncer
...
TLS 1.3 client skips server authentication when ServerHello carries an unsolicited pre_shared_key extension
...
SSH daemon allocates unbounded idle session channels, bypassing max_channels
...
Superlinear CPU denial of service in Erlang/OTP ASN.1 OBJECT IDENTIFIER decoder
...
ip_tunnel: adapt iptunnel_xmit_stats() to NETDEV_PCPU_STAT_DSTATS
...
AT_SECURE program buffer overflow via $ORIGIN processing
...
AT_SECURE programs may load attacker-controlled code via $ORIGIN
...
GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it.
...
Microsoft Office Outlook Remote Code Execution Vulnerability
...
net/mlx5e: Fix publication race for priv->channel_stats[]
...
gpio: mvebu: free generic chips on unbind
...
sctp: fix err_chunk memory leaks in INIT handling
...
ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer()
...
ALSA: dummy: Check card index validity at probe
...
RDMA/bnxt_re: Initialize dpi variable to zero
...
drm/amdgpu: Fix UVD dpb min size calculation for H264
...
net: packet: fix wrong transport_header when sending VLAN-tagged frame
...
bpf: Mask pseudo pointer values in verifier logs
...
perf/x86/amd/core: Avoid enabling BRS from the SVM reload path
...
mmc: vub300: fix use-after-free on probe failure
...
kernfs: link kn to its parent before the LSM init hook
...
xsk: drain continuation descs after overflow in xsk_build_skb()
...
nvmet-tcp: fix page fragment cache leak in error path
...
btrfs: fix deadlock cloning inline extent when using flushoncommit
...
ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT
...
Bluetooth: 6lowpan: avoid untracked enable work
...
md/raid1,raid10: fix deadlock in read error recovery path
...
md/raid10: fix writes_pending leak on write request failures
...
ASoC: topology: Check PCM and DAI name strings before use
...
btrfs: skip global block reserve accounting for rescue mounts
...
binfmt_misc: restore write access when removing an entry
...
md/raid1,raid10: fix bio accounting for split md cloned bios
...
xsk: fix buffer leak in xsk_drop_skb() for AF_XDP multi-buffer Tx
...
xsk: reclaim invalid Tx descriptors in ZC batch path
...
net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister()
...
ntopng: Missing Authorization Check in REST API Allows Non-Admin Users to Tamper Threat Intelligence Blacklist URLs
...