1576 matches found
BusyBox Resource Management Error Vulnerability (CNVD-2021-88210)
BusyBox is a set of applications containing several linux commands and tools by Denis Vlasenko, a Ukrainian personal developer. A resource management error vulnerability exists in Busybox's awk applet, which can be exploited by an attacker to execute code while handling specially crafted awk...
BusyBox Resource Management Error Vulnerability (CNVD-2021-88214)
BusyBox is a set of applications containing several linux commands and tools by Denis Vlasenko, a Ukrainian personal developer. A resource management error vulnerability exists in the Busybox awk applet, which stems from a denial of service due to "use after free" in Busybox's awk applet when...
BusyBox Resource Management Error Vulnerability (CNVD-2021-88208)
BusyBox is a set of applications containing several linux commands and tools by Denis Vlasenko, a Ukrainian personal developer. A resource management error vulnerability exists in the Busybox awk applet, which stems from a denial of service due to "use after free" in the Busybox awk applet when...
BusyBox Resource Management Error Vulnerability (CNVD-2021-88216)
BusyBox is a set of applications containing several linux commands and tools by Denis Vlasenko, a Ukrainian personal developer. A resource management error vulnerability exists in Busybox's awk applet, which can be exploited by an attacker to execute code while processing a specially crafted awk...
BusyBox Code Execution Vulnerability (CNVD-2021-89687)
A security vulnerability exists in the Busybox hush applet, which stems from the shell's incorrect handling of the &&&& string in the Busybox hush applet, which was developed by Denis Vlasenko, a Ukrainian developer. An attacker could exploit this vulnerability to cause a denial of service and...
BusyBox Resource Management Error Vulnerability (CNVD-2021-88211)
BusyBox is a set of applications containing several linux commands and tools by Denis Vlasenko, a Ukrainian personal developer. BusyBox suffers from a resource management error vulnerability that stems from a denial of service and possible code enforcement due to post-release usage in Busybox's a...
BusyBox code issue vulnerability (CNVD-2021-89688)
BusyBox is a suite of applications containing several linux commands and tools from the Ukrainian personal developer Denis Vlasenko. A code issue vulnerability exists in the Busybox hush applet, which stems from the fact that dereferencing the NULL pointer in Busybox's hush applet will result in ...
icedtea-web 数据伪造问题漏洞
icedtea-web is an open source implementation of JSR-56 Java Web Launching Protocol and API. icedtea-web is vulnerable to a data forgery issue vulnerability that stems from not properly determining the origin of an applet when performing a same-origin check. An attacker could use this vulnerabilit...
Mozilla Firefox Security Advisory (MFSA2015-130) - Linux
This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
network-manager-applet bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
PT-2021-23603 · Busybox +3 · Busybox +3
Name of the Vulnerable Software and Affected Versions: Busybox affected versions not specified Description: A NULL pointer dereference in Busybox's man applet leads to denial of service when a section name is supplied but no page argument is given. Recommendations: At the moment, there is no...
PT-2021-23604 · Busybox +3 · Busybox +3
Name of the Vulnerable Software and Affected Versions: Busybox affected versions not specified Description: An issue in Busybox's ash applet causes a denial of service when it processes a specially crafted shell command. This happens because the shell incorrectly identifies certain characters as...
PT-2021-23608 · Busybox +3 · Busybox +3
Name of the Vulnerable Software and Affected Versions: Busybox affected versions not specified Description: A use-after-free issue in Busybox's awk applet can lead to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function. Recommendations: At...
PT-2021-23605 · Busybox +3 · Busybox +3
Name of the Vulnerable Software and Affected Versions: Busybox affected versions not specified Description: A NULL pointer dereference in Busybox's hush applet can lead to denial of service when processing a crafted shell command. This issue arises due to missing validation after a x03 delimiter...
PT-2021-23606 · Busybox +3 · Busybox +3
Name of the Vulnerable Software and Affected Versions: Busybox affected versions not specified Description: The issue arises from an attacker-controlled pointer free in Busybox's hush applet, leading to a denial of service and possible code execution when a crafted shell command is processed. Thi...
CVE-2021-35528
Improper Access Control vulnerability in the application authentication and authorization of Hitachi Energy Retail Operations, Counterparty Settlement and Billing CSB allows an attacker to execute a modified signed Java Applet JAR file. A successful exploitation may lead to data extraction or...
The vulnerability of the Java Runtime Environment (JRE) component in Java SE software platforms allows attackers to execute arbitrary code.
The vulnerability of the Java Runtime Environment JRE component in Java SE programming platforms is related to the bypassing of security functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created applet...
YouDianCMS suffers from SQL injection vulnerability (CNVD-2021-46899)
YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. YouDianCMS has SQL injection vulnerability. Attackers can use the vulnerability to obtain sensiti...
MGASA-2021-0009 Updated busybox packages fix a security vulnerability
Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution. This attack appear to be exploitable via Simply download any file over HTTPS using "busybox wget https://compromised-domain.com/important-file"...
