Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A security vulnerability exists in the Google Android Bluetooth component, which stems from an uncaught exception that could lead to a cleanup failure...

The vulnerability of the Microsoft Outlook email client, related to incorrect cleaning or freeing of resources, allows a perpetrator to cause a service failure.

The vulnerability of the Microsoft Outlook email client is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2022-20253

CVE-2022-20253 affects the Android 13 Bluetooth stack. The issue is a cleanup failure caused by an uncaught exception that could enable remote denial of service without additional privileges or user interaction. Root cause is an uncaught exception in Bluetooth handling leading to DoS. Mitigation ...

USN-5564-1: Linux kernel (Intel IoTG) vulnerabilities

Zhenpeng Lin discovered that the network packet scheduler implementation in the Linux kernel did not properly remove all references to a route filter before freeing it in some situations. A local attacker could use this to cause a denial of service system crash or execute arbitrary code...

Intel Server Platform Services 安全漏洞

Intel Server Platform Services SPS is a server platform services program from Intel Corporation USA. A security vulnerability exists in Intel SPS SPSE304.08.04.330.0 and prior versions of SPSE304.01.04.530.0, which stems from an incomplete cleanup in the firmware subsystem could allow a privilege...

The vulnerability of Intel 82599 controller’s microprogramming software, related to improper cleaning or release of resources, allows a intruder to trigger a service failure.

The vulnerability of Intel 82599 controller microprogramming software is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

mariadb: use-after-poison when complex conversion is involved in blob

A flaw was found in the MariaDB Server, where it contains a use-after-free in the component, Itemfuncin::cleanup. This issue is exploited via specially crafted SQL statements, affecting availability...

mariadb: server crash in Item_func_in::cleanup/Item::cleanup_processor

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Itemfuncin::cleanup/Item::cleanupprocessor...

hw: cpu: incomplete clean-up in specific special register write operations (aka DRPW)

A flaw was found in hw. Incomplete cleanup in specific special register write operations for some Intel® Processors may allow an authenticated user to enable information disclosure via local access...

hw: cpu: incomplete clean-up of multi-core shared buffers (aka SBDR)

A flaw was found in hw. Incomplete cleanup of multi-core shared buffers for some Intel® Processors may allow an authenticated user to enable information disclosure via local access...

hw: cpu: incomplete clean-up of microarchitectural fill buffers (aka SBDS)

A flaw was found in hw. Incomplete cleanup of microarchitectural fill buffers on some Intel® Processors may allow an authenticated user to enable information disclosure via local access...

hw: cpu: incomplete clean-up of microarchitectural fill buffers (aka SBDS)

A flaw was found in hw. Incomplete cleanup of microarchitectural fill buffers on some Intel® Processors may allow an authenticated user to enable information disclosure via local access...

WordPress plugin weForms 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

GitLab 13.x - 15.0.4, 15.1.x - 15.1.3, 15.2 Incomplete Cleanup Vulnerability

GitLab is prone to an incomplete cleanup vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if...

PT-2025-25997

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been resolved, related to the MPTCP protocol. When the mptcp socket creation fails due to a CGROUP INET SOCK CREATE eBPF program, the MPTCP protocol leaks...

mariadb: use-after-poison when complex conversion is involved in blob

A flaw was found in the MariaDB Server, where it contains a use-after-free in the component, Itemfuncin::cleanup. This issue is exploited via specially crafted SQL statements, affecting availability...

mariadb: server crash in Item_func_in::cleanup/Item::cleanup_processor

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Itemfuncin::cleanup/Item::cleanupprocessor...

SUSE SLES12 Security Update : xen (SUSE-SU-2022:2574-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2574-1 advisory. - Incomplete cleanup of multi-core shared buffers for some IntelR Processors may allow an authenticated user to potentially enable information...

Lura和KrakenD 安全漏洞

Lura is Lura Project open source an ultra-high-performance API gateway and middleware assembled together open framework.KrakenD is KrakenD open source a scalable ultra-high-performance API gateway. Helps you easily adopt microservices and secure communications. A security vulnerability exists in...

SUSE SLES15 Security Update : xen (SUSE-SU-2022:2601-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2601-1 advisory. - Incomplete cleanup of multi-core shared buffers for some IntelR Processors may allow an authenticated user to potentially enable...