Mageia: Security Advisory (MGASA-2021-0203)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2018-0410)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-23034

A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case where a PV guest would have the IOMMU enabled. PV guests can request two forms of mappings. When both are in use for any individual mapping, unmapping of such a...

PT-2025-8065

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the amdgpu cs fence to handle ioctl function within the AMD GPU driver. The issue is triggered during an error path when the info-in.what variable falls...

PT-2024-10531

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.18.0-305.el8.x86 64 Description The vulnerability is related to a ref count issue in the scsi: qedf component of the Linux kernel. When a LOGO request is received during TMF, it can cause one of the I/Os to han...

CVE-2021-46348

There is an Assertion 'ECMASTRINGISREFEQUALSTOONE stringp' failed at /jerry-core/ecma/base/ecma-literal-storage.c in JerryScript 3.0.0...

PT-2022-36643

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves functions such as pdfi count cff index, pdfi read cff font, and pdfi load...

CVE-2021-40576

The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the gfisomgetpaytcount function in hinttrack.c, which allows attackers to cause a denial of service...

PT-2022-12349 · Reprise · Reprise License Manager

Name of the Vulnerable Software and Affected Versions: Reprise License Manager version 14.2 Description: The issue is a reflected cross-site scripting vulnerability in the "/goform/activate process" API endpoint, specifically in the count parameter, which can be exploited via GET requests. No...

PT-2022-7660

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a reference count leak in the rpc sysfs xprt state change function in the Linux kernel's sunrpc component. This leak occurs when the 3rd argument buf does not mat...

CVE-2021-45422: Improper Neutralization of Input During Web Page Generation

Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability in the /goform/activateprocess "count" parameter via GET. No authentication is required...

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. A code issue vulnerability exists in GPAC, which stems from a reference to a null pointer in the gfisomgetpaytcount function in the product's hinttrack.c file. An attacker could cause a denial of service via this vulnerability...

PT-2022-11268 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: Gpac version 1.0.1 Description: The issue is related to a null pointer dereference vulnerability in the gf isom get payt count function in hint track.c, which can be exploited by attackers to cause a denial of service. Recommendations: For Gp...

Business Logic Errors in silverstripe/silverstripe-framework

Description SilverStripe Framework is vulnerable to Business Logic Errors in the Failed login count since that value can be a negative number. Proof of Concept 1.After login, go to Security page under the path /admin/security/ 2.Click on any member record 3.In the member edit form, enter a negati...

PT-2022-38078

Уязвимость функции ubifs write end модуля fs/ubifs/file.c поддержки файловой системы ядра операционной системы Linux связана с ошибками при обновлении счетчика ссылок. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

CVE-2021-46043

A Pointer Dereference Vulnerability exits in GPAC 1.0.1 in the gflistcount function, which causes a Denial of Service...

CVE-2021-30351

An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

CVE-2021-30282

Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Network...

PT-2025-8466

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow issue exists in the Linux kernel, specifically in the ath11k driver. The scan req params structure can hold a maximum of 10 SSIDs, but the driver reports a capacity of ...

PT-2021-27305

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.12 Description: The issue is related to the mm/hwpoison functionality, specifically with clearing MF COUNT INCREASED before retrying get any page. The actual impact and attack plausibility have not yet bee...