CVE-2023-0386
- EPSS 56.35%
- Published 22.03.2023 21:15:18
- Last modified 18.06.2025 15:00:59
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This...
CVE-2023-26545
- EPSS 0.01%
- Published 25.02.2023 04:15:10
- Last modified 25.06.2025 20:54:48
In the Linux kernel before 6.1.13, there is a double free in net/mpls/af_mpls.c upon an allocation failure (for registering the sysctl table under a new location) during the renaming of a device.
CVE-2023-23914
- EPSS 0.18%
- Published 23.02.2023 20:15:13
- Last modified 12.03.2025 19:15:35
A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. Using its HSTS support, curl can be instructed to use HTTPS instead of usingan...
CVE-2023-23915
- EPSS 0.05%
- Published 23.02.2023 20:15:13
- Last modified 21.11.2024 07:47:05
A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested in parallel. Using its HSTS support, curl can be instructed to use HTTP...
CVE-2023-23916
- EPSS 0.06%
- Published 23.02.2023 20:15:13
- Last modified 12.03.2025 19:15:36
An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "chained" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with differentalgorithms...
CVE-2022-47518
- EPSS 0.03%
- Published 18.12.2022 06:15:09
- Last modified 17.04.2025 15:15:52
An issue was discovered in the Linux kernel before 6.0.11. Missing validation of the number of channels in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger a heap-based buffer overflow when copying the li...
CVE-2022-47519
- EPSS 0.02%
- Published 18.12.2022 06:15:09
- Last modified 17.04.2025 15:15:52
An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_OPER_CHANNEL in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger an out-of-bounds write when parsing the...
CVE-2022-47520
- EPSS 0.02%
- Published 18.12.2022 06:15:09
- Last modified 17.04.2025 15:15:53
An issue was discovered in the Linux kernel before 6.0.11. Missing offset validation in drivers/net/wireless/microchip/wilc1000/hif.c in the WILC1000 wireless driver can trigger an out-of-bounds read when parsing a Robust Security Network (RSN) infor...
CVE-2022-47521
- EPSS 0.03%
- Published 18.12.2022 06:15:09
- Last modified 17.04.2025 19:15:55
An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_CHANNEL_LIST in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger a heap-based buffer overflow when parsi...
CVE-2022-32221
- EPSS 1.2%
- Published 05.12.2022 22:15:10
- Last modified 21.11.2024 07:05:57
When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously was used to issue a `PUT` request wh...