CVE-2021-46348

There is an Assertion 'ECMASTRINGISREFEQUALSTOONE stringp' failed at /jerry-core/ecma/base/ecma-literal-storage.c in JerryScript 3.0.0...

CVE-2021-40576

The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the gfisomgetpaytcount function in hinttrack.c, which allows attackers to cause a denial of service...

PT-2022-12349 · Reprise · Reprise License Manager

Name of the Vulnerable Software and Affected Versions: Reprise License Manager version 14.2 Description: The issue is a reflected cross-site scripting vulnerability in the "/goform/activate process" API endpoint, specifically in the count parameter, which can be exploited via GET requests. No...

PT-2022-11268 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: Gpac version 1.0.1 Description: The issue is related to a null pointer dereference vulnerability in the gf isom get payt count function in hint track.c, which can be exploited by attackers to cause a denial of service. Recommendations: For Gp...

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. A code issue vulnerability exists in GPAC, which stems from a reference to a null pointer in the gfisomgetpaytcount function in the product's hinttrack.c file. An attacker could cause a denial of service via this vulnerability...

Business Logic Errors in silverstripe/silverstripe-framework

Description SilverStripe Framework is vulnerable to Business Logic Errors in the Failed login count since that value can be a negative number. Proof of Concept 1.After login, go to Security page under the path /admin/security/ 2.Click on any member record 3.In the member edit form, enter a negati...

CVE-2021-46043

A Pointer Dereference Vulnerability exits in GPAC 1.0.1 in the gflistcount function, which causes a Denial of Service...

PT-2025-8466

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow issue exists in the Linux kernel, specifically in the ath11k driver. The scan req params structure can hold a maximum of 10 SSIDs, but the driver reports a capacity of ...

ShonyDanza - A Customizable, Easy-To-Navigate Tool For Researching, Pen Testing, And Defending With The Power Of Shodan

A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan. With ShonyDanza, you can: Obtain IPs based on search criteria Automatically exclude honeypots from the results based on your pre-configured thresholds Pre-configure all IP searches to filte...

PT-2021-8132 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a buffer overflow in the NFSD component of the Linux kernel. If a client sends a READDIR count argument that is too small, the buffer size calculation results i...

Linux kernel information disclosure vulnerability (CNVD-2021-102393)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the U.S. KVM is one of the kernel-based virtual machines. overlayfs is one of the file systems. A security vulnerability exists in the Linux kernel that stems from a reference count leak in...

Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (crash) via a crafted number of channels in a WAV file which triggers an out-of-bounds memory access.

...

Linux kernel 信息泄露漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the U.S. KVM is one of the kernel-based virtual machines. overlayfs is one of the file systems. A security vulnerability exists in the Linux kernel that stems from a reference count leak in...

Qualcomm 芯片输入验证错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. a way to miniaturize circuits primarily semiconductor devices, but also passive components, etc. and are manufactured from time to time on the surface of semiconductor wafers. An input validation error vulnerability exists in multiple...

USN-5162-1: Linux kernel vulnerabilities

Ilja Van Sprundel discovered that the SCTP implementation in the Linux kernel did not properly perform size validations on incoming packets in some situations. An attacker could possibly use this to expose sensitive information kernel memory. CVE-2021-3655 It was discovered that the AMD...

USN-5162-1 linux, linux-aws, linux-azure, linux-gcp, linux-kvm, linux-oem-5.13, linux-oracle, linux-raspi vulnerabilities

Ilja Van Sprundel discovered that the SCTP implementation in the Linux kernel did not properly perform size validations on incoming packets in some situations. An attacker could possibly use this to expose sensitive information kernel memory. CVE-2021-3655 It was discovered that the AMD...

USN-5161-1: Linux kernel vulnerabilities

Ilja Van Sprundel discovered that the SCTP implementation in the Linux kernel did not properly perform size validations on incoming packets in some situations. An attacker could possibly use this to expose sensitive information kernel memory. CVE-2021-3655 It was discovered that the AMD...

UVI-2021-1002184 kunit: fix reference count leak in kfree_at_end

kunit: fix reference count leak in kfreeatend This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

GSD-2021-1002184 kunit: fix reference count leak in kfree_at_end

kunit: fix reference count leak in kfreeatend This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

GSD-2021-1002115 kunit: fix reference count leak in kfree_at_end

kunit: fix reference count leak in kfreeatend This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...