Off-by-one error in the ecryptfs_decode_from_filename function in fs/ecryptfs/crypto.c in the eCryptfs subsystem in the Linux kernel before 3.18.2 allows local users to cause a denial of service. Rated low severity (CVSS 3.6), this vulnerability is low attack complexity. No vendor patch available.
Buffer Overflow
Denial Of Service
Linux
Canonical
Linux Kernel
+1
NVD
GitHub
CVSS 2.0
3.6
EPSS
0.1%
Cross-site scripting (XSS) vulnerability in the Entity API module before 7.x-1.6 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a field label in the Token API. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable.
XSS
Entity Api
Entity Api Project
NVD
CVSS 2.0
3.5
EPSS
0.2%