CVE-2020-36405

Keystone Engine 0.9.2 has a use-after-free in llvmks::X86Operand::getToken...

CVE-2020-36404

Keystone Engine 0.9.2 has an invalid free in llvmks::SmallVectorImpl::SmallVectorImpl...

CVE-2020-36405

Keystone Engine 0.9.2 has a use-after-free in llvmks::X86Operand::getToken...

Design/Logic Flaw

Keystone Engine 0.9.2 has a use-after-free in llvmks::X86Operand::getToken...

Code injection

Keystone Engine 0.9.2 has an invalid free in llvmks::SmallVectorImpl::SmallVectorImpl...

CVE-2020-36405

Keystone Engine 0.9.2 has a use-after-free in llvmks::X86Operand::getToken...

CVE-2020-36405

CVE-2020-36405 concerns Keystone Engine v0.9.2, where a use-after-free bug occurs in llvm_ks::X86Operand::getToken. The NVD entry reports a CVSS 3.1 base score of 7.8 (HIGH) with LOCAL attack vector, no privileges required, but user interaction required, and impacts on confidentiality, integrity,...

CVE-2020-36404

CVE-2020-36404 affects Keystone Engine 0.9.2. Affected component: llvm_ks::SmallVectorImpl::~SmallVectorImpl (invalid free). Root cause: invalid free in destructor. Exploitation details are not provided in the supplied documents. No remediation/version fix is specified in the connected sources; n...

CVE-2020-36404

Keystone Engine 0.9.2 has an invalid free in llvmks::SmallVectorImpl::SmallVectorImpl...

Keystone Engine 安全漏洞

Keystone Engine is an assembler framework. A security vulnerability exists in Keystone Engine that stems from Keystone Engine having an invalid idle in llvmks::SmallVectorImpl::SmallVectorImpl...

Keystone Engine 缓冲区错误漏洞

Keystone Engine is an assembler framework, and a security vulnerability exists in Keystone Engine version 0.9.2, which stems from a stack-based buffer overflow in "processClientServerHello". No details of the vulnerability are currently available...

Keystone Engine 资源管理错误漏洞

Keystone Engine is an assembler framework. version 0.9.2 of Keystone Engine has a security vulnerability for which no details of the vulnerability are currently available...

GHSA-6M8P-X4QW-GH5J Insufficient Session Expiration in OpenStack Keystone

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The list of roles provided for an OAuth1 access token is silently ignored. Thus, when an access token is used to request a keystone token, the keystone token contains every role assignment the creator had for the project. Th...

Insufficient Session Expiration in OpenStack Keystone

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The list of roles provided for an OAuth1 access token is silently ignored. Thus, when an access token is used to request a keystone token, the keystone token contains every role assignment the creator had for the project. Th...

@bifot/adapter-knex (=12.0.2), @keystone-next/admin-ui (>=1.0.0 <=6.0.0) +26 more potentially affected by CVE-2021-32624 via @keystonejs/keystone (>=17.1.2 <=18.1.0)

@keystonejs/keystone NPM version =17.1.2, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =12.0.0, =10.0.0, =1.0.3, =7.3.8, =5.2.10, =5.1.16, =19.0.0, =1.0.14, =8.0.0, =8.1.2 and more Source cves: CVE-2021-32624 Source advisory: OSV:GHSA-27G8-R9VW-765X...

CVE-2021-32624

Keystone 5 is an open source CMS platform to build Node.js applications. This security advisory relates to a newly discovered capability in our query infrastructure to directly or indirectly expose the values of private fields, bypassing the configured access control. This is an access control...

CVE-2021-32624

Keystone 5 is an open source CMS platform to build Node.js applications. This security advisory relates to a newly discovered capability in our query infrastructure to directly or indirectly expose the values of private fields, bypassing the configured access control. This is an access control...

Design/Logic Flaw

Keystone 5 is an open source CMS platform to build Node.js applications. This security advisory relates to a newly discovered capability in our query infrastructure to directly or indirectly expose the values of private fields, bypassing the configured access control. This is an access control...

CVE-2021-32624

CVE-2021-32624 concerns Keystone 5, where a flaw in the query infrastructure can bypass read access control to expose private field values or metadata. The attacker can reveal information from private fields or lists, via an access-control related oracle attack; complexity is length-dependent and...

Keystone-5 信息泄露漏洞

Keystone-5 is open source an extensible platform . It is used to rapidly create highly customizable CMS and APIs. is a complete re-imagining of the future of KeystoneJS. Keystone-5 suffers from an information disclosure vulnerability that can directly or indirectly disclose the value of a private...