Lucene search
+L

259 matches found

UbuntuCve
UbuntuCve
•added 2020/11/28 7:15 a.m.•41 views

CVE-2020-29370

An issue was discovered in kmemcacheallocbulk in mm/slub.c in the Linux kernel before 5.5.11. The slowpath lacks the required TID increment, aka CID-fd4d9c7d0c71...

7CVSS6.8AI score0.00608EPSS
SaveExploits1References5
OSV
OSV
•added 2020/11/28 7:15 a.m.•16 views

UBUNTU-CVE-2020-29370

An issue was discovered in kmemcacheallocbulk in mm/slub.c in the Linux kernel before 5.5.11. The slowpath lacks the required TID increment, aka CID-fd4d9c7d0c71...

7CVSS6.7AI score0.00608EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2020/11/28 6:20 a.m.•55 views

CVE-2020-29370

An issue was discovered in kmemcacheallocbulk in mm/slub.c in the Linux kernel before 5.5.11. The slowpath lacks the required TID increment, aka CID-fd4d9c7d0c71...

7.6AI score0.00608EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2020/11/28 12:00 a.m.•16 views

Linux kernel 竞争条件问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel versions prior to 5.5.11 suffer from a contention condition issue vulnerability that stems from an issue found in kmemcacheallocbulk in mm/slub.c. slowpath lacks t...

7CVSS6.7AI score0.00608EPSS
SaveExploits1References7
Prion
Prion
•added 2020/09/17 5:15 p.m.•19 views

Default credentials

The Reset Password add-on before 1.2.0 for Alfresco has a broken algorithm involving an increment that allows a malicious user to change any user's account password include the admin account...

6.5CVSS8.7AI score0.01001EPSS
SaveExploits1References1Affected Software1
NVD
NVD
•added 2020/01/21 7:15 a.m.•32 views

CVE-2019-10585

Possible integer overflow happens when mmap find function will increment refcount every time when it invokes and can lead to use after free issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8053...

7.8CVSS8.5AI score0.00202EPSS
SaveExploits0References1
Citrix
Citrix
•added 2019/12/29 12:00 a.m.•18 views

Citrix Virtual Desktops Licensing - Increment Lines Explained

Note: The Citrix License Administration Console has reached end of life and end of support in Citrix Licensing 11.16.3. Use theCitrix Licensing Manager This article contains information about the increment line in Citrix Virtual Desktops Licensing.XenDesktop has been rebranded as Citrix Virtual...

6.8AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2019/12/17 2:18 a.m.•17 views

jenkins-script-security-plugin: handling of subexpressions in increment and decrement expressions not involving actual assignment allowed attackers to execute arbitrary code in sandboxed scripts

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of subexpressions in increment and decrement expressions not involving actual assignment allowed attackers to execute arbitrary code in sandboxed scripts...

4.9CVSS6.2AI score0.01047EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2019/12/17 2:18 a.m.•13 views

jenkins-script-security-plugin: handling of property names in property expressions in increment and decrement expressions allowed attackers to execute arbitrary code in sandboxed scripts

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of property names in property expressions in increment and decrement expressions allowed attackers to execute arbitrary code in sandboxed scripts...

4.9CVSS6.2AI score0.01047EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2019/12/16 1:54 p.m.•13 views

jenkins-script-security-plugin: handling of property names in property expressions in increment and decrement expressions allowed attackers to execute arbitrary code in sandboxed scripts

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of property names in property expressions in increment and decrement expressions allowed attackers to execute arbitrary code in sandboxed scripts...

4.9CVSS6.2AI score0.01047EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2019/12/11 8:38 a.m.•17 views

jenkins-script-security-plugin: handling of subexpressions in increment and decrement expressions not involving actual assignment allowed attackers to execute arbitrary code in sandboxed scripts

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of subexpressions in increment and decrement expressions not involving actual assignment allowed attackers to execute arbitrary code in sandboxed scripts...

4.9CVSS6.2AI score0.01047EPSS
SaveExploits0References5
NVD
NVD
•added 2019/09/12 2:15 p.m.•64 views

CVE-2019-10400

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of subexpressions in increment and decrement expressions not involving actual assignment allowed attackers to execute arbitrary code in sandboxed scripts...

4.9CVSS5.1AI score0.01047EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/09/12 1:55 p.m.•68 views

CVE-2019-10400

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of subexpressions in increment and decrement expressions not involving actual assignment allowed attackers to execute arbitrary code in sandboxed scripts...

7.3AI score0.01047EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/09/12 1:55 p.m.•56 views

CVE-2019-10399

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of property names in property expressions in increment and decrement expressions allowed attackers to execute arbitrary code in sandboxed scripts...

7.2AI score0.01047EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/12 12:00 a.m.•2 views

CVE-2019-10400: Undefined Security Weakness

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of subexpressions in increment and decrement expressions not involving actual assignment allowed attackers to execute arbitrary code in sandboxed scripts...

4.9CVSS7.3AI score0.01047EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/09/12 12:00 a.m.•9 views

PT-2019-11794 · Jenkins · Jenkins Script Security Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Script Security Plugin versions 1.62 and earlier Description: A sandbox bypass issue related to the handling of subexpressions in increment and decrement expressions not involving actual assignment allows attackers to execute arbitrar...

4.9CVSS7.2AI score0.01047EPSS
SaveExploits0References7
Jenkins Security Advisories
Jenkins Security Advisories
•added 2019/09/12 12:00 a.m.•12 views

Sandbox bypass vulnerability in script-security

Sandbox protection in script-security could be circumvented through any of the following: Crafted method names in method call expressions CVE-2019-10393 Crafted property names in property expressions on the left-hand side of assignment expressions CVE-2019-10394 Crafted property names in property...

4.9CVSS6.1AI score0.01047EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2019/07/17 8:15 p.m.•4 views

DEBIAN-CVE-2019-13619

In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash. This was addressed in epan/asn1.c by properly restricting buffer increments...

7.5CVSS8.9AI score0.06079EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/17 12:00 a.m.•3 views

CVE-2019-13619: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash. This was addressed in epan/asn1.c by properly restricting buffer increments...

7.5CVSS7.4AI score0.06079EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2019/07/17 12:00 a.m.•24 views

CVE-2019-13619

In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash. This was addressed in epan/asn1.c by properly restricting buffer increments...

7.5CVSS6.9AI score0.06079EPSS
SaveExploits1References5
Rows per page
Query Builder