24590 matches found
Multiple stack-based buffer overflows in the (1) ExtractRnick and (2) decrypt_topic_332 functions in FiSH allow remote attackers to execute arbitrary code via long strings.
...
FreeRADIUS RADIUS server allows remote attackers to cause a denial of service (CPU consumption) via a flood of Access-Request packets.
...
The default configuration of NCSA Telnet package for Macintosh and PC enables FTP, even though it does not include an "ftp=yes" line, which allows remote attackers to read and modify arbitrary files.
...
Buffer overflow in efax 0.9 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -x argument.
...
efax 0.9 and earlier, when installed setuid root, allows local users to read arbitrary files via the -d option, which prints the contents of the file in a warning message.
...
A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail.
...
Sendmail WIZ command enabled, allowing root access.
...
A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS).
...
In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" argument.
...
Libsoup: out-of-bounds read in cookie date handling of libsoup http library
...
In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results.
...
Libxslt: use-after-free with key data stored cross-rvt
...
Glib-networking: out of bound reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()"
...
Glib-networking: uninitialized memory dereferences on glib-networking through glib-networking/tls/openssl/gtlsbio.c via g_tls_bio_new_from_iostream() and g_tls_bio_new_from_datagram_based()
...
Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.
...
hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur
...
riscv: mm: Fix the out of bound issue of vmemmap address
...
fs: relax assertions on failure to encode file handles
...
ALSA: seq: oss: Fix races at processing SysEx messages
...
drm/dp_mst: Fix resetting msg rx state after topology removal
...
ASoC: topology: Fix references to freed memory
...
block: Fix page refcounts for unaligned buffers in __bio_release_pages()
...
x86/efistub: Call mixed mode boot services on the firmware's stack
...
media: aspeed: Fix memory overwrite if timing is 1600x900
...
Insecure file handling vulnerability
...
Libtiff: libtiff write-what-where
...
Fallback tar extraction in pip doesn't check symbolic links point to extraction directory
...
astral-tokio-tar has a path traversal in tar extraction
...
virtio-net: fix overflow inside virtnet_rq_alloc
...
ksmbd: discard write access to the directory open
...
xfs: don't walk off the end of a directory data block
...
ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
...
ACPI: CPPC: Use access_width over bit_width for system memory accesses
...
net: ks8851: Handle softirqs at the end of IRQ thread to fix hang
...
Bluetooth: L2CAP: Fix not validating setsockopt user input
...
drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
...
dma-direct: Leak pages on dma_set_decrypted() failure
...
usb: typec: ucsi: Limit read size on v1.2
...
x86/coco: Require seeding RNG with RDRAND on CoCo systems
...
netfilter: bridge: replace physindev with physinif in nf_bridge_info
...
ceph: blocklist the kclient when receiving corrupted snap trace
...
bpf: Guard stack limits against 32bit overflow
...
drm/amd/display: Fix hang/underflow when transitioning to ODM4:1
...
media: rkisp1: Fix IRQ handling due to shared interrupts
...
Chromium: CVE-2025-10892 Integer overflow in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-10891 Integer overflow in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-10890 Side-channel information leakage in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...