Month: February 2026

Information published. Continue reading CVE-2024-43873 vhost/vsock: always initialize seqpacket_allow→

Information published. Continue reading CVE-2021-40633 A memory leak (out-of-memory) in gif2rgb in util/gif2rgb.c in giflib 5.1.4 allows remote attackers trigger an out of memory exception or denial of service via a gif format file.→

Information published. Continue reading CVE-2017-14867 Git before 2.10.5, 2.11.x before 2.11.4, 2.12.x before 2.12.5, 2.13.x before 2.13.6, and 2.14.x before 2.14.2 uses unsafe Perl scripts to support subcommands such as cvsserver, which allows attackers to execute arbitrary OS commands via shell metacharacters in a module name. The vulnerable code is reachable via git-shell even without CVS support.→

Information published. Continue reading CVE-2024-49862 powercap: intel_rapl: Fix off by one in get_rpi()→

Information published. Continue reading CVE-2022-28805 singlevar in lparser.c in Lua from (including) 5.4.0 up to (excluding) 5.4.4 lacks a certain luaK_exp2anyregup call leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code.→

Information published. Continue reading CVE-2015-8472 Buffer overflow in libpng allows remote attackers to cause a denial of service→

Information published. Continue reading CVE-2021-26291 block repositories using http by default→

Information published. Continue reading CVE-2024-43861 net: usb: qmi_wwan: fix memory leak for not ip packets→