23144 matches found
c-ares has a use-after-free in read_answers()
...
CVE-2011-2691
...
CVE-2011-2501
...
CVE-2012-3425
...
CVE-2011-3045
...
Microsoft Power Automate Desktop Information Disclosure Vulnerability
Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network...
The GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service
...
Qemu: lsi53c895a: dma reentrancy issue leads to stack overflow
...
The vulnerability in unzip occurs due to improper handling of Unicode strings
...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
An Improper Link Resolution Before File Access ("Link Following") and Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal"). This vulnerability occurs when extracting a maliciously crafted tar file, which can result in unauthorized file writes or overwrites outside the intended extraction directory. The issue is associated with index.js in the tar-fs package. This issue affects tar-fs: from 0.0.0 before 1.16.4, from 2.0.0 before 2.1.2, from 3.0.0 before 3.0.8.
...
XZ has a heap-use-after-free bug in threaded .xz decoder
...
hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.
...
Mishandling of comma during folding and unicode-encoding of email headers
...
Libtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.c
...
media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread
...
can: ctucanfd: handle skb allocation failure
...
LoongArch: csum: Fix OoB access in IP checksum code for negative lengths
...
orangefs: fix a oob in orangefs_debug_write
...
HID: multitouch: Add NULL check in mt_input_configured
...
ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt
...
arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
...
gpiolib: Fix crash on error in gpiochip_get_ngpios()
...
KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
...
ndisc: use RCU protection in ndisc_alloc_skb()
...
neighbour: use RCU protection in __neigh_notify()
...
openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
...
af_unix: Update unix_sk(sk)->oob_skb under sk_receive_queue lock.
...
powerpc/powernv: Add a null pointer check in opal_powercap_init()
...
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.
...
team: better TEAM_OPTION_TYPE_STRING validation
...
ipv6: mcast: extend RCU protection in igmp6_send()
...
ASoC: codecs: wcd938x: fix incorrect used of portid
...
GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function find_abstract_instance in dwarf2.c.
...
ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data()
...
acct: perform last write from workqueue
...
HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints()
...
spi: sn-f-ospi: Fix division by zero
...
vxlan: check vxlan_vnigroup_init() return value
...
can: etas_es58x: fix potential NULL pointer dereference on udev->serial
...
libarchive bsdunzip.c list null pointer dereference
...
vrf: use RCU protection in l3mdev_l3_out()
...
media: uvcvideo: Remove dangling pointers
...
scsi: ufs: bsg: Set bsg_queue to NULL after removal
...
drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
...
arp: use RCU protection in arp_xmit()
...
vsock: Keep the binding until socket destruction
...
nfsd: clear acl_access/acl_default after releasing them
...