Lucene search
+L

13268 matches found

OSV
OSV
•added 2021/05/31 3:39 p.m.•27 views

GSD-2021-1000101 ext4: always panic when errors=panic is specified

ext4: always panic when errors=panic is specified This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/05/31 12:00 a.m.•3 views

PT-2021-28527

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.3 Description The issue is related to the ext4 file system in the Linux Kernel. When the errors=panic option is specified, the system will always panic. This behavior was introduced in version v5.11 and is...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/05/31 12:00 a.m.•2 views

PT-2021-28568

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description The issue is related to the ext4 file system, where the system always panics when the errors=panic option is specified. The actual impact and attack plausibility have not yet been proven...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/05/31 12:00 a.m.•1 views

PT-2021-24533

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.3 Description: The issue is related to the ext4 file system in the Linux Kernel. When the errors=panic option is specified, the system will always panic. This behavior was introduced in version v5.11 and i...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/05/31 12:00 a.m.•0 views

PT-2021-24574

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description The issue is related to the ext4 file system in the Linux Kernel. When the errors=panic option is specified, the system will always panic. This behavior was introduced in version v5.11 and is...

5.8AI score
SaveExploits0References1
Veracode
Veracode
•added 2021/05/28 1:05 p.m.•33 views

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service. Resource management errors via fftools/cmdutils.c results in a denial of service condition...

7.5CVSS4.4AI score0.01347EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2021/05/27 12:00 a.m.•16 views

PT-2021-7045 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to potentially elevate their privileges. Recommendations: At the moment, there is no...

8.8CVSS7.9AI score0.01307EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
•added 2021/05/26 12:00 a.m.•18 views

The vulnerability of the GNTTABOP_map_grant component in Xen hypervisors allows a perpetrator to trigger a service failure.

The vulnerability of the GNTTABOPmapgrant component in Xen hypervisors is related to errors in returned values. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.8AI score0.00527EPSS
SaveExploits1References7Affected Software4
Prion
Prion
•added 2021/05/25 7:15 p.m.•32 views

Denial of service

Denial of Service issue in FFmpeg 4.2 due to resource management errors via fftools/cmdutils.c...

5CVSS7.4AI score0.01347EPSS
SaveExploits1References2Affected Software2
CVE
CVE
•added 2021/05/25 6:48 p.m.•208 views

CVE-2020-20451

FFmpeg 4.2 contains a Denial of Service vulnerability (CVE-2020-20451) caused by resource management errors in fftools/cmdutils.c. Connected advisories from Debian and openSUSE/SUSE enumerate this CVE among a set of FFmpeg issues and indicate remediation via updated FFmpeg packages (examples: Deb...

7.5CVSS8.2AI score0.01347EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
•added 2021/05/25 6:48 p.m.•70 views

CVE-2020-20451

Denial of Service issue in FFmpeg 4.2 due to resource management errors via fftools/cmdutils.c...

7.5CVSS5.7AI score0.01347EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2021/05/25 12:00 a.m.•15 views

PT-2021-7536 · Boa · Boa

Name of the Vulnerable Software and Affected Versions: Boa version 0.94.13 Description: The issue is related to configuration errors in files such as backup.html, preview.html, js/log.js, log.html, email.html, online-users.html, and config.js of the Boa HTTP server. Exploitation of this issue may...

7.8CVSS7.4AI score0.12307EPSS
SaveExploits2References12
Github Security Blog
Github Security Blog
•added 2021/05/24 5:00 p.m.•77 views

Denial-of-Service within Docker container

Impact If you run teler inside a Docker container and encounter errors.Exit function, it will cause denial-of-service SIGSEGV because it doesn't get process ID and process group ID of teler properly to kills. Specific Go Packages Affected ktbs.dev/teler/pkg/errors Patches Upgrade to the = 0.0.1...

7.5CVSS7.2AI score0.01429EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2021/05/24 5:00 p.m.•58 views

GHSA-JHJ6-5MH6-4PVF Denial-of-Service within Docker container

Impact If you run teler inside a Docker container and encounter errors.Exit function, it will cause denial-of-service SIGSEGV because it doesn't get process ID and process group ID of teler properly to kills. Specific Go Packages Affected ktbs.dev/teler/pkg/errors Patches Upgrade to the = 0.0.1...

5.9CVSS7.4AI score0.01429EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2021/05/24 4:57 p.m.•81 views

Ory fosite contains Improper Handling of Exceptional Conditions

Impact The TokenRevocationHandler ignores errors coming from the storage. This can lead to unexpected 200 status codes indicating successful revocation while the token is still valid. Whether an attacker can use this for her advantage depends on the ability to trigger errors in the store...

8CVSS1.2AI score0.01588EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2021/05/24 4:57 p.m.•129 views

GHSA-7MQR-2V3Q-V2WM Ory fosite contains Improper Handling of Exceptional Conditions

Impact The TokenRevocationHandler ignores errors coming from the storage. This can lead to unexpected 200 status codes indicating successful revocation while the token is still valid. Whether an attacker can use this for her advantage depends on the ability to trigger errors in the store...

8CVSS7.7AI score0.01588EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2021/05/24 12:00 a.m.•20 views

The vulnerability of the SharePoint Enterprise Server software, related to errors in information presentation on the user interface, allows a hacker to execute an attack using a spearphishing technique.

The vulnerability of the SharePoint Enterprise Server software is related to errors in information presentation at the user interface level. Exploiting this vulnerability could allow a malicious actor to carry out an attack using a spear-phishing technique...

7.8CVSS7.1AI score0.01569EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2021/05/24 12:00 a.m.•16 views

The vulnerability of Intel Falcon 8+ UAS AscTec Thermal Viewer lies in errors during resolution saving, which allows attackers to escalate their privileges.

The vulnerability of Intel Falcon 8+ UAS AscTec Thermal Viewer relates to errors during resolution saving. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.7CVSS7.2AI score0.00282EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/05/21 12:00 a.m.•15 views

IBM Security Guardium 安全漏洞

IBM Security Guardium is a comprehensive data protection solution that offers a full range of data security features from compliance support to dynamic data shielding. An information disclosure vulnerability exists in IBM Security Guardium version 11.2. An attacker could exploit this vulnerabilit...

5.3CVSS6.4AI score0.01275EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2021/05/21 12:00 a.m.•8 views

CVE-2021-20428

IBM Security Guardium 11.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196315...

5.3CVSS6.4AI score0.01275EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder