9421 matches found
UBUNTU-CVE-2021-36083
KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat::loadTileRLE...
grub2: acpi command allows privileged user to load crafted ACPI tables when Secure Boot is enabled
A flaw was found in GRUB 2, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with privileged access to craft a Secondary System Description Table SSDT containing code to overwrite the Linux kernel lockdown variable content direct...
resource-agents bug fix and enhancement update
The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Bug Fixes and Enhancements: aws-vpc-move-ip: Enable eni lookup for AWS shared networks v...
resource-agents bug fix and enhancement update
An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The resource-agents packages provide the Pacemaker and RGManager...
Citrix Cloud : VDAs session count increases and the Load index does not show the right value
Events on Server VDA: Event ID : 1039 Source : Citrix Desktop Service Error Details : The Citrix Desktop Service failed to initialize a performance counter. Load management associated with this counter will be disabled...
CVE-2021-32722
GlobalNewFiles is a mediawiki extension. Versions prior to 48be7adb70568e20e961ea1cb70904454a671b1d are affected by an uncontrolled resource consumption vulnerability. A large amount of page moves within a short space of time could overwhelm Database servers due to improper handling of load...
Design/Logic Flaw
GlobalNewFiles is a mediawiki extension. Versions prior to 48be7adb70568e20e961ea1cb70904454a671b1d are affected by an uncontrolled resource consumption vulnerability. A large amount of page moves within a short space of time could overwhelm Database servers due to improper handling of load...
CVE-2021-32722 Uncontrolled Resource Consumption in GlobalNewFiles
GlobalNewFiles is a mediawiki extension. Versions prior to 48be7adb70568e20e961ea1cb70904454a671b1d are affected by an uncontrolled resource consumption vulnerability. A large amount of page moves within a short space of time could overwhelm Database servers due to improper handling of load...
CVE-2021-32722: Uncontrolled Resource Consumption
GlobalNewFiles is a mediawiki extension. Versions prior to 48be7adb70568e20e961ea1cb70904454a671b1d are affected by an uncontrolled resource consumption vulnerability. A large amount of page moves within a short space of time could overwhelm Database servers due to improper handling of load...
OESA-2021-1242 binutils security update
The GNU Binutils are a collection of binary tools. Security Fixes: An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avrelf32loadrecordsfromsection probably resulting in a crash or in some cases memory...
Dell BIOSConnect信任管理问题漏洞
DELL Dell BIOSConnect is an underlying platform from Dell USA that enables BIOS to connect to Dell's HTTP backend and load images via the HTTP method. A trust management issue vulnerability exists in the Dell BIOSConnect feature and Dell HTTPS Boot feature that stems from an incorrect certificate...
DarkLoadLibrary - LoadLibrary For Offensive Operations
LoadLibrary for offensive operations. How does is work? https://www.mdsec.co.uk/2021/06/bypassing-image-load-kernel-callbacks/ Usage DARKMODULE DarkModule = DarkLoadLibrary LOADLOCALFILE, // control flags L"TestDLL.dll", // local dll path, if loading from disk NULL, // DLL Buffer to load from if...
CVE-2021-0550
In onLoadFailed of AnnotateActivity.java, there is a possible way to gain WRITEEXTERNALSTORAGE permissions without user consent due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2020-19510
Textpattern 4.7.3 contains an aribtrary file load via the fileinsert function in include/txpfile.php...
CVE-2020-19510
Textpattern 4.7.3 contains an aribtrary file load via the fileinsert function in include/txpfile.php...
Design/Logic Flaw
Textpattern 4.7.3 contains an aribtrary file load via the fileinsert function in include/txpfile.php...
CVE-2020-19510
Textpattern 4.7.3 contains an aribtrary file load via the fileinsert function in include/txpfile.php...
CVE-2020-19510
CVE-2020-19510 affects Textpattern 4.7.3, where an arbitrary file load/upload is possible through the file_insert function in include/txp_file.php. The connected sources consistently describe this vulnerability as an arbitrary file upload issue in Textpattern; no exploit details are provided in t...
PT-2021-4272 · Unknown +1 · Manuskript +1
Name of the Vulnerable Software and Affected Versions: Manuskript versions 0.12.0 and earlier Description: The issue is related to insecure deserialization via the pickle.load function in settings.py, allowing remote attackers to execute arbitrary code by crafting a settings.pickle file in a...