814 matches found
PT-2022-17703
Name of the Vulnerable Software and Affected Versions Air Cargo Management System version 1.0 Description A SQL injection issue was found in the Air Cargo Management System, specifically via the ref code parameter. Recommendations For Air Cargo Management System version 1.0, consider restricting...
RUSTSEC-2022-0096 Invalid drop of VMExternRef from partially-initialized instances in the pooling instance allocator
This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-88xq-w8cq-xfg7. For more information see the GitHub-hosted security advisory...
GHSA-88XQ-W8CQ-XFG7 Invalid drop of partially-initialized instances in the pooling instance allocator for modules with defined `externref` globals
Impact There exists a bug in the pooling instance allocator in Wasmtime's runtime where a failure to instantiate an instance for a module that defines an externref global will result in an invalid drop of a VMExternRef via an uninitialized pointer. As instance slots may be reused between...
shure.com Open Redirect vulnerability OBB-2349218
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2024-10531
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.18.0-305.el8.x86 64 Description The vulnerability is related to a ref count issue in the scsi: qedf component of the Linux kernel. When a LOGO request is received during TMF, it can cause one of the I/Os to han...
CVE-2022-22891
Jerryscript 3.0.0 was discovered to contain a SEGV vulnerability via ecmarefobjectinline in /jerry-core/ecma/base/ecma-gc.c...
UBUNTU-CVE-2022-22891
Jerryscript 3.0.0 was discovered to contain a SEGV vulnerability via ecmarefobjectinline in /jerry-core/ecma/base/ecma-gc.c...
PT-2022-15719
Name of the Vulnerable Software and Affected Versions Jerryscript version 3.0.0 Description A SEGV issue was discovered in Jerryscript via the ecma ref object inline function in /jerry-core/ecma/base/ecma-gc.c. Recommendations For Jerryscript version 3.0.0, consider restricting access to the ecma...
CVE-2021-26247
As an unauthenticated remote user, visit "http:///authchangepassword.php?ref=" to successfully execute the JavaScript payload present in the "ref" URL parameter...
UBUNTU-CVE-2021-26247
As an unauthenticated remote user, visit "http:///authchangepassword.php?ref=alert1" to successfully execute the JavaScript payload present in the "ref" URL parameter...
CVE-2021-26247
As an unauthenticated remote user, visit "http:///authchangepassword.php?ref=alert1" to successfully execute the JavaScript payload present in the "ref" URL parameter...
PT-2022-9718
Name of the Vulnerable Software and Affected Versions Cacti versions affected versions not specified Description The issue allows an unauthenticated remote user to execute a JavaScript payload by visiting a specific URL. This is achieved by injecting the payload into the ref URL parameter in the...
CVE-2021-26247: Improper Neutralization of Input During Web Page Generation
As an unauthenticated remote user, visit "http:// /authchangepassword.php?ref= " to successfully execute the JavaScript payload present in the "ref" URL parameter...
Cacti 跨站脚本漏洞
Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool obtains data via snmpget, analyzes it using RRDtool drawing graphs, and provides data and user management features. Cacti suffers from a cross-site scripting vulnerability that allows an...
PT-2025-8055
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue has been resolved in the Linux kernel. The problem occurs when ref tracker dir init is called, and the struct ref tracker dir is marked as dead. To detect this...
PT-2021-27225
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.11 Description A memory leak issue was discovered in the add inode ref function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2021-27176
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.5 through v5.10.87 Description A memory leak issue was discovered in the add inode ref function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.5 throug...
SingleNativeTokenExitV2 doesn't take input deadline to consideration
Handle kenzo Vulnerability details SingleNativeTokenExitV2 takes as input from the user a deadline for the trades. However, it does not use this input for the actual trade but sets the deadline to be block.timestamp. Impact Trades will not work as expected. User might set a deadline for the trade...
PT-2021-8220
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a memory leak in the add inode ref function. Specifically, when the function returns in line 1184, the victim name allocated by kmalloc in line 1169 is not freed,...