24590 matches found
Apache HTTP Server: HTTP/2 DoS by Memory Increase
...
Apache HTTP Server: SSRF with mod_headers setting Content-Type header
...
Apache HTTP Server: mod_ssl TLS upgrade attack
...
Apache HTTP Server: mod_proxy_http2 denial of service
...
Libssh: invalid return code for chacha20 poly1305 with openssl backend
...
Libssh: double free vulnerability in libssh key export functions
...
Chromium: CVE-2025-7657 Use after free in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-6558 Incorrect validation of untrusted input in ANGLE and GPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2025-6558 exists in the wild...
Chromium: CVE-2025-7656 Integer overflow in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Redis DoS Vulnerability due to bad connection error handling
...
Helm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution
...
Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf
...
Gnutls: vulnerability in gnutls othername san export
...
Gnutls: vulnerability in gnutls sct extension parsing
...
Gnutls: vulnerability in gnutls certtool template parsing
...
In Node.js, the `ReadFileUtf8` internal binding leaks memory due to a corrupted pointer in `uv_fs_s.file`: a UTF-16 path buffer is allocated but subsequently overwritten when the file descriptor is set. This results in an unrecoverable memory leak on every call. Repeated use can cause unbounded memory growth, leading to a denial of service. Impact: * This vulnerability affects APIs relying on `ReadFileUtf8` on Node.js release lines: v20 and v22.
...
Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL
...
Gdk-pixbuf: uninitialized memory disclosure in gdkpixbuf gif lzw decoder
...
tar-fs has issue where extract can write outside the specified dir with a specific tarball
...
Sensitive headers not cleared on cross-origin redirect in net/http
...
Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory
...
spi: spi-imx: Add check for spi_imx_setupxfer()
...
wifi: mac80211: Purge vif txq in ieee80211_do_stop()
...
ASoC: imx-card: Add NULL check in imx_card_probe()
...
atm: Fix NULL pointer dereference
...
net_sched: skbprio: Remove overly strict queue assertions
...
ksmbd: prevent out-of-bounds stream writes by validating *pos
...
drm/amdkfd: debugfs hang_hws skip GPU with MES
...
KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception
...
octeon_ep: Fix host hang issue during device reboot
...
net_sched: ets: Fix double list add in class with netem as child qdisc
...
pds_core: remove write-after-free of client_id
...
DNS message with invalid TSIG causes an assertion failure
...
pm: cpupower: bench: Prevent NULL dereference on malloc failure
...
jbd2: remove wrong sb->s_sequence check
...
arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
...
ipvs: fix uninit-value for saddr in do_output_route4
...
Use-after-free in "unicode_escape" decoder with error handler
...
Libsoup: null pointer dereference in libsoup may lead to denial of service
...
net: phy: leds: fix memory leak
...
iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo
...
tracing: Verify event formats that have "%*p.."
...
usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
...
cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
...
Unbounded recursion in Python Protobuf
...
irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs
...
Linux-pam: linux-pam directory traversal
...
bnxt_en: Fix out-of-bound memcpy() during ethtool -w
...