PT-2021-13448

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to an integer overflow in the valid ipc dram addr function of cm access control.c, which could lead to a possible out of bounds read. This may result in local information disclosure, requiring...

PT-2021-26198

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.10 Description: The issue concerns the RDMA/cma component, specifically ensuring that rdma addr cancel occurs before more requests are issued. The actual impact and potential for attack have not been prove...

PT-2021-30193

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.10 Description The issue concerns the RDMA/cma component, specifically the rdma addr cancel function. It is noted that this function should be executed before issuing more requests. The actual impact and...

PT-2021-22936

Name of the Vulnerable Software and Affected Versions openSIS Classic version 8.0 Description An SQL Injection issue exists via the ADDR CONT USRN, ADDR CONT PSWD, SECN CONT USRN, or SECN CONT PSWD parameters in HoldAddressFields.php. This allows for potential exploitation of the SQL injection...

PT-2024-11387

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises from the RDMA/cma component in the Linux kernel, where the Finite State Machine FSM can enter a cycle, allowing rdma resolve ip to be called twice on the same id priv...

PT-2021-27747

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state indicates involvement of functions...

CVE-2020-20486

IEC104 v1.0 contains a stack-buffer overflow in the parameter Iec10xStaAddr...

PT-2021-10500

Name of the Vulnerable Software and Affected Versions: IEC104 version 1.0 Description: The issue is a stack-buffer overflow in the Iec10x Sta Addr parameter. Recommendations: For IEC104 version 1.0, consider restricting access to the Iec10x Sta Addr parameter to minimize the risk of exploitation...

PT-2021-21247

Name of the Vulnerable Software and Affected Versions Care2x Hospital Information Management version 2.7 Alpha Description A stored cross-site scripting XSS issue has been identified. The vulnerability is found in POST requests to the "/modules/registration admission/patient register.php" page,...

PT-2021-30955

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37536 Crash type: Use-of-uninitialized-value Crash state: H5F addr decode len H5VL native token to addr H5VL native object open...

PT-2021-29433

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.45 Description The issue is related to a null dereference in the parse dev addr function in the ieee802154 module. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2021-29511

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.12 Description A null dereference issue was discovered in the parse dev addr function of the ieee802154 module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-24772

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue is related to the initialization of GFX10 ADDR CONFIG for VCN v3 in DPG mode. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-28766

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.9 through 5.12.3 Description The issue is related to the initialization of GFX10 ADDR CONFIG for VCN v3 in DPG mode. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

UBUNTU-CVE-2021-23133

A race condition in Linux kernel SCTP sockets net/sctp/socket.c before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctpdestroysock is called without socknetsk-sctp.addrwqlock then an element is removed from the...

PT-2024-11140

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue has been resolved in the Linux kernel, specifically in the spi-zynqmp-gqspi component. The issue occurs when handling op-addr, which uses the buffer "tmpbuf" after...

PT-2021-28014

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A heap buffer overflow read issue has been identified. The crash state indicates involvement of functions such as H5F addr decode len, H5F addr decode, and H5G ent decode. Recommendations At the...

PT-2020-20379

Name of the Vulnerable Software and Affected Versions Asylo versions up to 0.6.0 Description An arbitrary memory read issue allows an untrusted attacker to make a call to enc untrusted inet pton using an attacker-controlled klinux addr buffer parameter. The parameter size is unchecked, allowing t...

PT-2020-20376

Name of the Vulnerable Software and Affected Versions Asylo versions up to 0.6.0 Description An arbitrary memory overwrite issue allows an attacker to make a host call to FromkLinuxSockAddr with attacker-controlled content and size of klinux addr, enabling the attacker to write memory values from...

PT-2020-21659

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 8 crash has been reported. The crash involves the following functions: iotlb to region mips, get page addr code mips, and tb fi...