24590 matches found
Form validation popups could capture escape key presses. Therefore, spamming form validation messages could be used to prevent users from exiting full-screen mode. This vulnerability affects Firefox < 128 and Thunderbird < 128.
...
net: ethernet: bgmac: Fix refcount leak in bcma_mdio_mii_register
...
kvm: s390: Reject memory region operations for ucontrol VMs
...
urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the authorization header to be exposed to unintended hosts or transmitted in cleartext. NOTE: this issue exists because of an incomplete fix for CVE-2018-20060 (which was case-sensitive).
...
blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
...
btrfs: lock the inode in shared mode before starting fiemap
...
udmabuf: fix memory leak on last export_udmabuf() error path
...
media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode()
...
drm/amdgpu: Skip do PCI error slot reset during RAS recovery
...
When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox < 115.
...
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
...
NASM Netwide Assember outmacho.c macho_no_dead_strip heap-based overflow
...
An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasm_calloc() in nasmlib/alloc.c.
...
btrfs: fix deadlock with fiemap and extent locking
...
drm/amd/display: Do not return negative stream id for array
...
RDMA/hns: Fix soft lockup under heavy CEQE load
...
drm/amd/display: Check dce_hwseq before dereferencing it
...
An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expand_mmac_params function in the modules/preprocs/nasm/nasm-pp.c component.
...
Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript
...
An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the cfl_list_size in cfl_list.h:165.
...
fs/9p: fix NULL pointer dereference on mkdir
...
scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
...
btrfs: fix use-after-free of block device file in __btrfs_free_extra_devids()
...
GNU Binutils ld xmemdup.c xmemdup memory leak
...
The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use of the ssl_context, ca_certs, or ca_certs_dir argument.
...
NASM Netwide Assember preproc.c do_directive use after free
...
Denial of service when trying to parse malformed POST requests in aiohttp
...
Use After Free vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the do_directive function in the modules/preprocs/nasm/nasm-pp.c component.
...
Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile
...
net: ena: Add validation for completion descriptors consistency
...
Podman: podman missing tls verification
...
drm/sprd: fix potential NULL dereference
...
drm/amd/display: prevent hang on link training fail
...
An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expand_smacro function in the modules/preprocs/nasm/nasm-pp.c component.
...
iPXE TLS tls.c tls_new_ciphertext information exposure
...
The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver. This issue could allow an attacker to perform remote code execution and sandbox escape. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.
...
In an out-of-memory scenario an allocation could fail but free would have been called on the pointer afterwards leading to memory corruption. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.
...
ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak.
...
clk: mediatek: Fix memory leaks on probe
...
drm/amd/display: Guard Possible Null Pointer Dereference
...
Unsanitized NUL in environment variables on Windows in syscall and os/exec
...
Buffer Overflow vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expr_delete_term function in the libyasm/expr.c component.
...
An attacker could have leveraged the Windows Error Reporter to run arbitrary code on the system escaping the sandbox. *Note:* This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.
...
ublk: fix handling recovery & reissue in ublk_abort_queue()
...
thermal: core: Reference count the zone in thermal_zone_get_by_id()
...
The __hash_open function in hash.c:229 in Mozilla Network Security Services (NSS) allows context-dependent attackers to cause a denial of service (floating point exception and crash) via a crafted cert8.db file.
...
In specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
...
An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the yasm_section_bcs_first function in the libyasm/section.c component.
...
CSP violations generated links in the console tab of the developer tools, pointing to the violating resource. This caused a DNS prefetch which leaked that a CSP violation happened. This vulnerability affects Firefox < 128 and Thunderbird < 128.
...