32226 matches found
NULL pointer dereference in SCRAM client-final-message parsing in PgBouncer
...
TLS 1.3 client skips server authentication when ServerHello carries an unsolicited pre_shared_key extension
...
SSH daemon allocates unbounded idle session channels, bypassing max_channels
...
Superlinear CPU denial of service in Erlang/OTP ASN.1 OBJECT IDENTIFIER decoder
...
ip_tunnel: adapt iptunnel_xmit_stats() to NETDEV_PCPU_STAT_DSTATS
...
AT_SECURE program buffer overflow via $ORIGIN processing
...
AT_SECURE programs may load attacker-controlled code via $ORIGIN
...
GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it.
...
Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code locally...
net/mlx5e: Fix publication race for priv->channel_stats[]
...
gpio: mvebu: free generic chips on unbind
...
sctp: fix err_chunk memory leaks in INIT handling
...
ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer()
...
ALSA: dummy: Check card index validity at probe
...
RDMA/bnxt_re: Initialize dpi variable to zero
...
drm/amdgpu: Fix UVD dpb min size calculation for H264
...
ntb: Store original DMA address for future release
...
net: packet: fix wrong transport_header when sending VLAN-tagged frame
...
fbdev: Wrap user-invoked calls to fb_set_var() in helper
...
bpf: Mask pseudo pointer values in verifier logs
...
perf/x86/amd/core: Avoid enabling BRS from the SVM reload path
...
mmc: vub300: fix use-after-free on probe failure
...
kernfs: link kn to its parent before the LSM init hook
...
xsk: drain continuation descs after overflow in xsk_build_skb()
...
nvmet-tcp: fix page fragment cache leak in error path
...
btrfs: fix deadlock cloning inline extent when using flushoncommit
...
ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT
...
Bluetooth: 6lowpan: avoid untracked enable work
...
md/raid1,raid10: fix deadlock in read error recovery path
...
md/raid10: fix writes_pending leak on write request failures
...
ASoC: topology: Check PCM and DAI name strings before use
...
btrfs: skip global block reserve accounting for rescue mounts
...
binfmt_misc: restore write access when removing an entry
...
md/raid1,raid10: fix bio accounting for split md cloned bios
...
xsk: fix buffer leak in xsk_drop_skb() for AF_XDP multi-buffer Tx
...
xsk: reclaim invalid Tx descriptors in ZC batch path
...
net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister()
...
ntopng: Missing Authorization Check in REST API Allows Non-Admin Users to Tamper Threat Intelligence Blacklist URLs
...
ntopng: Missing Authorization on System Configuration Backup Download and Listing
...
ntopng: Remote Code Execution via OS Command Injection in Vulnerability-Scan REST API
...
Conda: Entry-point path traversal in noarch:python install (arbitrary file write) — canonical Python implementation
...
libXrender RenderQueryPictFormats Reply Heap-based Buffer Overflow
...
libX11 XkbGetMap Reply Heap-based Buffer Overflow
...
An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c
...
tarfile hardlink fallback ignores custom extraction filter rejection via None
...
go-openapi/swag jsonutils before 0.27.1 Uncontrolled Recursion in Ordered JSON Marshal and Unmarshal
...
GNU Binutils elflink.c elf_link_add_object_symbols null pointer dereference
...
GNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_section_offset null pointer dereference
...