Total 533 security vulnerabilities recorded for linuxfoundation software and firmware.
PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/vararg_functions.cpp. This vulnerabilit...
In imgsys, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execu...
In gnss, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execu...
In flashc, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of privilege with System executio...
In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execut...
In flashc, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with System execution privileges ...
In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execut...
In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execut...
In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no ...
Fluid is an open source Kubernetes-native Distributed Dataset Orchestrator and Accelerator for data-intensive applications. An OS command injection vu...
Software for Open Networking in the Cloud (SONiC) Elevation of Privilege Vulnerability...
In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution p...
In lk, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System executi...
Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNX_ASSERT and ONNX_ASSERTM functions have an of...
Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have...
`@backstage/backend-common` is a common functionality library for backends for Backstage, an open platform for building developer portals. In `@backst...
Yocto Project is an open source collaboration project that helps developers create custom Linux-based systems regardless of the hardware architecture....
runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal fil...
Dex is an identity service that uses OpenID Connect to drive authentication for other apps. Dex 2.37.0 serves HTTPS with insecure TLS 1.0 and TLS 1.1....
CubeFS is an open-source cloud-native file storage system. CubeFS prior to version 3.3.1 was found to leak users secret keys and access keys in the lo...
CubeFS is an open-source cloud-native file storage system. A vulnerability was found in CubeFS prior to version 3.3.1 that could allow users to read s...
CubeFS is an open-source cloud-native file storage system. Prior to version 3.3.1, CubeFS used an insecure random string generator to generate user-sp...
CubeFS is an open-source cloud-native file storage system. A vulnerability was found during in the CubeFS master component in versions prior to 3.3.1 ...
CubeFS is an open-source cloud-native file storage system. A security vulnerability was found in CubeFS HandlerNode in versions prior to 3.3.1 that co...