9988 matches found
HTTP proxy double free
If curl is told to use an HTTP proxy for a transfer with a non-HTTPS URL, it sets up the connection to the remote server by issuing a CONNECT request to the proxy, and then tunnels the rest of protocol through. An HTTP proxy might refuse this request HTTP proxies often only allow outgoing...
The vulnerability in the Crash Report component of the sigsegvHandler function in the debug.c file of the Redis database management system allows a attacker to cause a service failure.
The vulnerability of the Crash Report component of the sigsegvHandler function in the debug.c file of the Redis database management system is related to improper cleanup or release of resources. Exploiting this vulnerability may allow an attacker to cause a service failure...
The vulnerability of Keybase’s open-source key catalog for iOS and Android clients stems from incomplete cleanup of temporary or auxiliary resources. This allows attackers to expose protected information or cause service failures.
The vulnerability of Keybase’s open-source key catalog for iOS and Android exists due to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow a malicious actor to disclose protected information or cause service failures...
Double Free
libxml2 is vulnerable to double free. When a reference cycle is detected in the XML entity cleanup function the XML entity data can be stored in a dictionary which may become corrupted resulting in logic errors, including memory errors like double free...
PT-2022-5926 · Bluez +2 · Bluez +2
Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The issue is related to the function jlink init in the file monitor/jlink.c of the BlueZ component, which is associated with incorrect resource cleanup or deallocation. This can lead t...
hw: cpu: incomplete clean-up of microarchitectural fill buffers (aka SBDS)
A flaw was found in hw. Incomplete cleanup of microarchitectural fill buffers on some Intel® Processors may allow an authenticated user to enable information disclosure via local access...
hw: cpu: incomplete clean-up in specific special register write operations (aka DRPW)
A flaw was found in hw. Incomplete cleanup in specific special register write operations for some Intel® Processors may allow an authenticated user to enable information disclosure via local access...
Important: Red Hat Security Advisory: kernel-rt security and bug fix update
An update for kernel-rt is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...
hw: cpu: incomplete clean-up in specific special register write operations (aka DRPW)
A flaw was found in hw. Incomplete cleanup in specific special register write operations for some Intel® Processors may allow an authenticated user to enable information disclosure via local access...
Boodskap IoT Platform 跨站脚本漏洞
Boodskap IoT Platform is an IoT platform from Boodskap, Inc. A security vulnerability exists in Boodskap IoT Platform version v4.4.9-02 that stems from its application not enforcing input validation and output cleanup across multiple functions resulting in multiple cross-site scripts...
PT-2025-37490
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s io uring/af unix functionality related to the garbage collection of registered files. The issue involves deferring the garbage collection of registere...
The vulnerability of VMware Cloud Foundation and VMware ESXi hypervisor lies in improper resource cleaning or release mechanisms, allowing attackers to trigger service failures.
The vulnerability of the VMware Cloud Foundation virtualization platform and the VMware ESXi hypervisor is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...
AlmaLinux 8 : kernel-rt (ALSA-2022:6437)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:6437 advisory. - Incomplete cleanup of multi-core shared buffers for some IntelR Processors may allow an authenticated user to potentially enable information disclosure...
CVE-2021-36899
Authenticated admin+ Reflected Cross-Site Scripting XSS vulnerability in Gabe Livan's Asset CleanUp: Page Speed Booster plugin = 1.3.8.4 at WordPress...
CVE-2021-36899
Authenticated admin+ Reflected Cross-Site Scripting XSS vulnerability in Gabe Livan's Asset CleanUp: Page Speed Booster plugin = 1.3.8.4 at WordPress...
Cross site scripting
Authenticated admin+ Reflected Cross-Site Scripting XSS vulnerability in Gabe Livan's Asset CleanUp: Page Speed Booster plugin = 1.3.8.4 at WordPress...
CVE-2021-36899 WordPress Asset CleanUp: Page Speed Booster plugin <= 1.3.8.4 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability
Authenticated admin+ Reflected Cross-Site Scripting XSS vulnerability in Gabe Livan's Asset CleanUp: Page Speed Booster plugin = 1.3.8.4 at WordPress...
CVE-2021-36899 WordPress Asset CleanUp: Page Speed Booster plugin <= 1.3.8.4 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability
Authenticated admin+ Reflected Cross-Site Scripting XSS vulnerability in Gabe Livan's Asset CleanUp: Page Speed Booster plugin = 1.3.8.4 at WordPress...
CVE-2021-36899
The CVE-2021-36899 entry concerns the WordPress Asset CleanUp: Page Speed Booster plugin, versions
ALPINE-CVE-2022-33748
lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling path. While doing so, locking requirements were not paid attention to. As a result two cooperating guests granting each other transitive grants can cause locks to be...