All CVEs — page 484 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw allows a new nvme-fc controller in the CONNECTING state to trigger a warning due to uninitialized tag sets, potentially leading to locking issues and workqueue errors.
An unauthenticated attacker can submit malformed SAML messages that cause authentik worker processes to crash and restart, leading to denial of service for legitimate users. This affects SAML identity providers and sources, with database-backed sessions persisting through restarts but continued attacks causing sustained service degradation.
The flaw allows unauthorized access to stored credentials via API serializers, posing a risk to sensitive information.
The flaw allows an account with delegated permissions to grant superuser status or assign roles, bypassing necessary authorization checks, leading to unauthorized administrative access.
The flaw allows an attacker to substitute an email address during the enrollment process, potentially gaining access to the user's account.
The Linux kernel's stmmac network driver incorrectly enables a redundant RX Buffer Unavailable (RBUE) interrupt that causes a storm of MAC interrupts under heavy RX load, leading to system performance degradation or stall. This happens because RBUE fires continuously when the DMA runs out of RX descriptors, while the normal RX completion interrupt already handles ring refill through NAPI.
The flaw in virtio-fs allows for a double-free condition, which can lead to a potential security issue if exploited.
The Linux kernel's HID driver contains a use-after-free vulnerability in the hidpp_connect_event() function. When input_register_device() fails, the code frees the device but leaves a stale pointer in hidpp->input, potentially allowing attackers to trigger memory corruption through subsequent access to the freed device structure.