23108 matches found
Global Buffer Overflow in GNU gzip
...
attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr
...
Nmap - Integer Underflow in IPv6 Extension Header Parsing
...
RDMA: During rereg_mr ensure that REREG_ACCESS is compatible
...
ip6_vti: set netns_immutable on the fallback device.
...
bpf: Free reuseport cBPF prog after RCU grace period.
...
WebOb: Location header normalization during redirect leads to open redirect
...
mailbox: add sanity check for channel array
...
padata: Put CPU offline callback in ONLINE section to allow failure
...
ALSA: hda/conexant: Fix missing error check for jack detection
...
audit: fix incorrect inheritable capability in CAPSET records
...
ice: fix NULL pointer dereference in ice_reset_all_vfs()
...
drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG
...
scsi: sg: Resolve soft lockup issue when opening /dev/sgX
...
Bluetooth: fix memory leak in error path of hci_alloc_dev()
...
6lowpan: fix off-by-one in multicast context address compression
...
mm/hugetlb: restore reservation on error in hugetlb folio copy paths
...
Vim: Out-of-bounds Read with Text Properties
...
net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove
...
Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction
...
Vim: Out-of-bounds Read in Text Property Count
...
Vim: Out-of-bounds Write in Spell File Prefix Dump
...
net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint
...
net: mvpp2: refill RX buffers before XDP or skb use
...
ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE
...
Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings
...
IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN
...
USB: serial: io_ti: fix heap overflow in get_manuf_info()
...
Vim: Out-of-bounds Write in Spell File Word Count
...
Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename
...
ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()
...
Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument
...
Bluetooth: bnep: reject short frames before parsing
...
xfrm: espintcp: do not reuse an in-progress partial send
...
net/sched: netem: fix queue limit check to include reordered packets
...
Vim: Out-of-bounds Read with libsodium-encrypted Files
...
netdevsim: zero initialize struct iphdr in dummy sk_buff
...
bpf, sockmap: Fix af_unix null-ptr-deref in proto update
...
drm/msm/dpu: fix mismatch between power and frequency
...
net: phonet: free phonet_device after RCU grace period
...
drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable()
...
bpf, arm64: Fix off-by-one in check_imm signed range check
...
net/sched: cls_fw: fix NULL dereference of "old" filters before change()
...
net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown
...
Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]`
...
netfilter: x_tables: avoid leaking percpu counter pointers
...
drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs
...
Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247
...