Design/Logic Flaw

There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected...

Design/Logic Flaw

There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to kernel restart...

CVE-2021-37089

There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to kernel restart...

CVE-2021-37089

CVE-2021-37089 describes an "Incomplete Cleanup" vulnerability in Huawei HarmonyOS where exploitation can cause the kernel to reboot. The connected documents consistently reference Huawei HarmonyOS smartphones and indicate the issue stems from incomplete cleanup routines, leading to a kernel rest...

CVE-2021-37080

CVE-2021-37080 is associated with Huawei HarmonyOS and is described as an Incomplete Cleanup vulnerability in Huawei Smartphones, affecting availability. The CVSS data from NVD indicates CVSSv3.1 base score of 7.5 (High) with NETWORK attack vector, Low attack complexity, no privileges required, n...

CVE-2021-37080

There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected...

CVE-2021-28703

grant table v2 status pages may remain accessible after de-allocation take two Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant table v2 status pages, however, get de-allocated whe...

openSUSE: Security Advisory for permissions (openSUSE-SU-2021:1520-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

USN-5158-1: ImageMagick vulnerabilities

It was discovered that ImageMagick incorrectly handled certain values when processing visual effects based image files. By tricking a user into opening a specially crafted image file, an attacker could crash the application causing a denial of service. CVE-2021-20244 It was discovered that...

USN-5158-1 imagemagick vulnerabilities

It was discovered that ImageMagick incorrectly handled certain values when processing visual effects based image files. By tricking a user into opening a specially crafted image file, an attacker could crash the application causing a denial of service. CVE-2021-20244 It was discovered that...

CleanMyMac X: Performance and Security Software for Macbook

We use Internet-enabled devices in every aspect of our lives today—to find information, shop, bank, do homework, play games, and keep in touch with friends and family. As a result, our devices contain much personal information about us. Also, any great device will get a little clunky and slow ove...

openssh security update

7.4p1-22.0.1 - enlarge format buffer size for certificate serial number so the log message can record any 64-bit integer without truncation openssh bz3012 Orabug: 30448895 7.4p1-22 + 0.10.3-2 - avoid segfault in Kerberos cache cleanup 1999263 - fix CVE-2021-41617 2008884...

CKEditor 跨站脚本漏洞

CKEditor is a set of open source, web-based text editors.A cross-site scripting vulnerability exists in CKEditor, which allows attackers to bypass content cleanup to inject misformatted HTML, which could lead to the execution of JavaScript code. No detailed vulnerability details are currently...

iPack SCADA Automation software SQL注入漏洞

iPack SCADA Automation software is used by the Turkish company iPack to enable tracking and management of data from remote points and to intervene in the system. The SQL injection vulnerability in iPack SCADA Automation software stems from improper cleanup. iPack SCADA Automation software is...

Aerohive NetConfig 10.0r8a Local File Inclusion / Remote Code Execution Exploit

This Metasploit module exploits local file inclusion and log poisoning vulnerabilities CVE-2020-16152 in Aerohive NetConfig, version 10.0r8a build-242466 and older in order to achieve unauthenticated remote code execution as the root user. NetConfig is the Aerohive/Extreme Networks HiveOS...

PT-2021-8035 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the cfg80211 function in the Linux kernel, where switching from P2P GO type to ADHOC type via send msgNL80211 CMD SET INTERFACE does not call the cleanup functi...

ImageMagick 资源管理错误漏洞

ImageMagick is used to create, edit, composite, or convert digital images.A resource management error vulnerability exists in ImageMagick, which stems from a failure to properly clean up the conversion process before invoking it with certain inputs. An attacker could exploit this vulnerability to...

Aerohive NetConfig 10.0r8a Local File Inclusion / Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Aerohive NetConfig 10.0r8a LFI and log poisoning to RCE', 'Description' = %q This module exploits LFI and log poisoning vulnerabilities...

The vulnerability in the built-in RDoc documentation generator for the Ruby programming language allows a perpetrator to execute arbitrary commands.

The vulnerability of the RDoc documentation generator for the Ruby programming language is related to the lack of measures taken to clean up data at the control level. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

PekeUpload 跨站脚本漏洞

PekeUpload is a Jquery Html5 file upload plugin from the personal developer Pedro Molina in Colombia. pekeUpload suffers from a cross-site scripting vulnerability that exists due to insufficient cleanup of user-supplied data. A remote attacker could exploit the vulnerability to be able to trick a...