CVE-2019-25052

In Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call update and final cryptographic functions directly, causing a crash that could leak sensitive information...

CVE-2019-25052

In Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call update and final cryptographic functions directly, causing a crash that could leak sensitive information...

CVE-2019-25052: Use of a Broken or Risky Cryptographic Algorithm

In Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call update and final cryptographic functions directly, causing a crash that could leak sensitive information...

CVE-2021-36543

Cross-Site Request Forgery CSRF vulnerability in the /op/op.UnlockDocument.php in SeedDMS v5.1.x 5.1.23 and v6.0.x 6.0.16 allows a remote attacker to unlock any document without victim's knowledge, by enticing an authenticated user to visit an attacker's web page...

CVE-2021-36542

Cross-Site Request Forgery CSRF vulnerability in the /op/op.LockDocument.php in SeedDMS v5.1.x5.1.23 and v6.0.x 6.0.16 allows a remote attacker to lock any document without victim's knowledge, by enticing an authenticated user to visit an attacker's web page...

CVE-2021-35343

Cross-Site Request Forgery CSRF vulnerability in the /op/op.Ajax.php in SeedDMS v5.1.x5.1.23 and v6.0.x6.0.16 allows a remote attacker to edit document name without victim's knowledge, by enticing an authenticated user to visit an attacker's web page...

php:php-fuzz-execute: Heap-use-after-free in ZEND_ASSIGN_DIM_SPEC_VAR_UNUSED_OP_DATA_VAR_HANDLER

Detailed Report: https://oss-fuzz.com/testcase?key=4673792654835712 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-execute Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf48950e8 Crash State:...

PT-2021-21283

Name of the Vulnerable Software and Affected Versions SeedDMS versions 5.1.x through 5.1.22 SeedDMS versions 6.0.x through 6.0.15 Description A Cross-Site Request Forgery CSRF issue exists, allowing a remote attacker to lock any document without the victim's knowledge. This can be achieved by...

PT-2021-21284

Name of the Vulnerable Software and Affected Versions SeedDMS versions 5.1.x through 5.1.22 SeedDMS versions 6.0.x through 6.0.15 Description A Cross-Site Request Forgery CSRF issue exists in the /op/op.UnlockDocument.php endpoint, allowing a remote attacker to unlock any document without the...

CVE-2021-35343: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in the /op/op.Ajax.php in SeedDMS v5.1.x5.1.23 and v6.0.x6.0.16 allows a remote attacker to edit document name without victim's knowledge, by enticing an authenticated user to visit an attacker's web page...

PT-2021-20894

Name of the Vulnerable Software and Affected Versions: SeedDMS versions 5.1.x through 5.1.22 SeedDMS versions 6.0.x through 6.0.15 Description: A Cross-Site Request Forgery CSRF issue exists, allowing a remote attacker to modify a document name without the victim's knowledge. This can be achieved...

PT-2021-28335

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 4 crash has been reported. The crash state includes zend gc addref, ZEND ASSIGN OP SPEC VAR TMPVAR HANDLER, and fuzzer execute...

PT-2021-24848

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.10.36 Description: The issue is related to a use-after-free in the zynqmp qspi exec op function. This problem was introduced in version v5.10 and is fixed in version v5.10.37. The actual impact and attac...

PT-2021-24751

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.12.3 Description The issue is related to a use-after-free in the zynqmp qspi exec op function. This problem was introduced in version v5.10 and is fixed in Linux Kernel version v5.12.4. The actual impact...

PT-2021-28842

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.10.36 Description The issue is related to a use-after-free in the zynqmp qspi exec op function. This problem was introduced in version v5.10 and is fixed in version v5.10.37. The actual impact and attack...

DEBIAN-CVE-2020-25668

A flaw was found in Linux Kernel because access to the global variable fgconsole is not properly synchronized leading to a use after free in confontop...

PT-2021-9662

Name of the Vulnerable Software and Affected Versions Zephyr versions 1.14.2 and later Zephyr versions 2.2.0 and later Description The issue is related to a Remote Denial of Service in LwM2M do write op tlv, caused by Improper Input Validation and an Infinite Loop. Recommendations For Zephyr...

CVE-2021-29556

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service via a FPE runtime error in tf.rawops.Reverse. This is because the...

PYSEC-2021-212

TensorFlow is an end-to-end open source platform for machine learning. The implementation of tf.rawops.ReverseSequence allows for stack overflow and/or CHECK-fail based denial of service. The...

PYSEC-2021-740

TensorFlow is an end-to-end open source platform for machine learning. The implementation of tf.io.decoderaw produces incorrect results and crashes the Python interpreter when combining fixedlength and wider datatypes. The implementation of the padded...