23143 matches found
espintcp: remove encap socket caching to avoid reference leak
...
ksmbd: use list_first_entry_or_null for opinfo_get_list()
...
wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init()
...
Incorrect Authentication Tag length usage in AES GCM decryption in OpenIDC/cjose
...
A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected.
...
Buffer overflow in the rc_mksid function in plugins/radius/util.c in Paul's PPP Package (ppp) 2.4.6 and earlier, when the PID for pppd is greater than 65535, allows remote attackers to cause a denial of service (crash) via a start accounting message to the RADIUS server.
...
No QUIC certificate pinning with wolfSSL
...
Prevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise Server
...
pds_core: Prevent possible adminq overflow/stuck condition
...
Ring: some aes functions may panic when overflow checking is enabled in ring
...
spdlog pattern_formatter-inl.h scoped_padder resource consumption
...
Users: `root` appended to group listings
...
Possible denial of service when passing malformed data in a URL to qDecodeDataUrl
...
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension
...
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension
...
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors
...
net: pktgen: fix access outside of user given buffer in pktgen_thread_write()
...
btrfs: avoid NULL pointer dereference if no valid csum tree
...
__legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
...
wifi: iwlwifi: fix debug actions order
...
vxlan: Annotate FDB data races
...
net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
...
media: cx231xx: set device_caps for 417
...
mm/huge_memory: fix dereferencing invalid pmd migration entry
...
yasm commit 9defefae was discovered to contain a NULL pointer dereference via the yasm_section_bcs_append function at section.c.
...
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
...
Vulnerability in the MySQL Server product of Oracle MySQL
...
Vulnerability in the MySQL Server product of Oracle MySQL
...
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension
...
orangefs: Do not truncate file size
...
net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
...
serial: mctrl_gpio: split disable_ms into sync and no_sync APIs
...
can: bcm: add locking for bcm_op runtime updates
...
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore
...
Vulnerability in the MySQL Server product of Oracle MySQL
...
Vulnerability in the MySQL Server product of Oracle MySQL
...
Vulnerability in the MySQL Server product of Oracle MySQL
...
Vulnerability in the MySQL Server product of Oracle MySQL
...
NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix
...
GNU Binutils objcopy.c copy_section heap-based overflow
...
Vim has path traversal issue with zip.vim and special crafted zip archives
...
Vulnerability in the MySQL Server product of Oracle MySQL
...
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
...
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
...
Null byte termination in hostnames
...
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
...
Vulnerability in the MySQL Server product of Oracle MySQL
...
Vulnerability in the MySQL Server product of Oracle MySQL
...