23143 matches found
Libssh: incorrect return code handling in ssh_kdf() in libssh
...
Apache HTTP Server: HTTP/2 DoS by Memory Increase
...
Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()
...
Libssh: double free vulnerability in libssh key export functions
...
mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTR_PACKET environment variable. NOTE: mtr on macOS may often have Sudo rules, as an indirect consequence of Homebrew not installing setuid binaries.
...
Apache HTTP Server: mod_ssl error log variable escaping
...
Apache HTTP Server: SSRF with mod_headers setting Content-Type header
...
Libssh: invalid return code for chacha20 poly1305 with openssl backend
...
Apache HTTP Server: mod_proxy_http2 denial of service
...
Libssh: out-of-bounds read in sftp_handle()
...
Chromium: CVE-2025-7657 Use after free in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-6558 Incorrect validation of untrusted input in ANGLE and GPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2025-6558 exists in the wild...
Chromium: CVE-2025-7656 Integer overflow in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Redis DoS Vulnerability due to bad connection error handling
...
Helm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution
...
Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf
...
Gnutls: vulnerability in gnutls othername san export
...
Gnutls: vulnerability in gnutls sct extension parsing
...
Gnutls: vulnerability in gnutls certtool template parsing
...
nfsd: put dl_stid if fail to queue dl_recall
...
arm64: Don't call NULL in do_compat_alignment_fixup()
...
memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
...
MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.
...
Expired Pointer Dereference in Wireshark
...
Libopensc: incorrect handling length of buffers or files in libopensc
...
btrfs: fix qgroup reserve leaks in cow_file_range
...
NULL Pointer Dereference in Wireshark
...
Systemd-resolved: unsigned name response in signed zone is not refused when dnssec=yes
...
Glibc: stack read overflow in getaddrinfo in no-aaaa mode
...
Out-of-bounds Read in Wireshark
...
Memory Allocation with Excessive Size Value in Wireshark
...
Incorrect calculation on P256 curves in crypto/internal/nistec
...
Access of Uninitialized Pointer in Wireshark
...
Use After Free in editcap
...
Mismatched Memory Management Routines in editcap
...
Mismatched Memory Management Routines in Wireshark
...
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark
...
Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file
...
An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_bgp_open(tvbuff_t*tvb, proto_tree*tree, packet_info*pinfo), optlen components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.
...
A Buffer Overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the wsutil/to_str.c, and format_fractional_part_nsecs components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.
...
latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.
...
A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.
...
Improper Handling of Missing Values in Wireshark
...
bpf: track changes_pkt_data property for global functions
...
Erlang/OTP SSH Has Strict KEX Violations
...
ksmbd: prevent out-of-bounds stream writes by validating *pos
...
perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.
...
net: lan743x: Fix memleak issue when GSO enabled
...