32226 matches found
.Org Server Present Extension Use-After-Free
...
Rsyslog: DynFile Path Traversal → Arbitrary File Write as Root → RCE
...
Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation
...
Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction
...
Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt
...
Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree
...
Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation
...
Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH
...
Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer
...
Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer
...
Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value
...
Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body
...
serialize-javascript 7.0.1 before 7.1.3 XSS via unescaped </script in function body
...
adm-zip through 0.6.1 Duplicate-Entry Validation Bypass via Canonically Equivalent Names
...
Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg
...
Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoning
...
Open-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuio
...
Drivers: hv: Don't reset VMBus connection state on error/exit paths
...
power: supply: core: prevent unregistering a power supply while a callback runs
...
vsock: treat TCP_CLOSING as once-established
...
net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure
...
netlink: reset skb headers before unicast and multicast filtering
...
scsi: target: iscsi: Fix race in discovery auth updates
...
ocfs2/dlm: Protect the recovery list during debugfs reads
...
pipe: preserve existing fasync readers on writer setup failure
...
netlink: avoid hashing the network namespace pointer
...
net: bcmgenet: unshare the skb before writing the control block
...
calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()
...
gpio: mxc: fix race between chained IRQ handler install and probe completion
...
perf: Fix perf_pmu_migrate_context() leaving events behind
...
ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture
...
autofs: ignore notification errors from a replaced pipe
...
unicode: free the map after a grace period
...
watch_queue: Fix note pool publication race in watch_queue_set_size()
...
x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context
...
KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry
...
fsnotify: prevent mark additions during connector teardown
...
ext4: free the sbi after a grace period
...
ipc: drop the mqueue mount with kern_unmount() on setup failure
...
ntfs3: free the sbi after a grace period
...
futex: Fix mm reuse handling for FUT_OFF_MMSHARED
...
net/sched: fix use-after-free in __tcf_action_put()
...
net: rds: fix uninitialized trans dereference in CM event handler
...
sctp: revalidate output stream after association connect wait
...
tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields
...
i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()
...
scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies
...
scsi: st: Fix use-after-free race between st_remove() and st_open()
...