The vulnerability of the scsi_ioctl function (drivers/scsi/scsi_ioctl.c) in the Linux operating system, which allows a hacker to increase their privileges

The vulnerability of the scsiioctl function drivers/scsi/scsiioctl.c in the Linux operating system is related to the improper handling of SCSI device classes during SCSI command authorization. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability in the implementation of the SSH network protocol for Cisco IOS and Cisco IOS XE operating systems allows a hacker to cause a service failure.

The vulnerability of the SSH network protocol implementation in Cisco IOS and Cisco IOS XE operating systems is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

PT-2023-34089 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: A potential security issue exists due to the improper handling of the q vector. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

CVE-2022-41721 Request smuggling due to improper request handling in golang.org/x/net/http2/h2c

A request smuggling attack is possible when using MaxBytesHandler. When using MaxBytesHandler, the body of an HTTP request is not fully consumed. When the server attempts to read HTTP2 frames from the connection, it will instead be reading the body of the HTTP request, which could be...

USN-5795-1 net-snmp vulnerabilities

It was discovered that Net-SNMP incorrectly handled certain requests. A remote attacker could possibly use these issues to cause Net-SNMP to crash, resulting in a denial of service...

Design/Logic Flaw

Information exposure in DSP services due to improper handling of freeing memory...

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2023-1134)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-25722

CVE-2022-25722 describes information exposure in DSP services due to improper handling of freeing memory. Affected: DSP-related components (Qualcomm/DP S services) as per CVE entry and Android Pixel bulletin referencing this CVE under Qualcomm kernel subcomponent. Root cause: improper memory mana...

Privilege Escalation

github.com/usememos/memos is vulnerable to privilege escalation. Improper handling of insufficient permissions and privileges allows remote attackers to elevate privileges...

express-param vulnerable to Improper Handling of Extra Parameters

A vulnerability was found in flitto express-param up to 0.x. It has been classified as critical. This affects an unknown part of the file lib/fetchParams.js. The manipulation leads to improper handling of extra parameters. It is possible to initiate the attack remotely. Upgrading to version 1.0.0...

CVE-2017-20160 flitto express-param fetchParams.js parameter pollution

A vulnerability was found in flitto express-param up to 0.x. It has been classified as critical. This affects an unknown part of the file lib/fetchParams.js. The manipulation leads to improper handling of extra parameters. It is possible to initiate the attack remotely. Upgrading to version 1.0.0...

GHSA-6WHJ-8G9G-5JVX usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges

Improper Handling of Insufficient Permissions or Privileges in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4863 Improper Handling of Insufficient Permissions or Privileges in usememos/memos

Improper Handling of Insufficient Permissions or Privileges in GitHub repository usememos/memos prior to 0.9.1...

GHSA-42Q2-M54F-JH95 sememos/memos vulnerable to Improper Handling of Values

In usememos/memos 0.9.0 and prior, an attacker can post malicious content to another user's memos page via POST request...

sememos/memos vulnerable to Improper Handling of Values

In usememos/memos 0.9.0 and prior, an attacker can post malicious content to another user's memos page via POST request...

CVE-2022-4851

Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1...

Input validation

Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4851 Improper Handling of Values in usememos/memos

Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4851

The CVE-2022-4851 entry refers to usememos/memos prior to version 0.9.1, with the root cause described as improper handling of values. The vulnerability allows an attacker to post malicious content to another user’s memos page via a POST request. Public details across connected documents confirm ...

CVE-2022-37392 Apache Traffic Server: Improperly reading the client requests

Improper Check for Unusual or Exceptional Conditions vulnerability in handling the requests to Apache Traffic Server. This issue affects Apache Traffic Server 8.0.0 to 9.1.2...